CVE-2007-1380

Description

The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context-dependent attackers to obtain sensitive information (memory contents) via a serialized variable entry with a large length value, which triggers a buffer over-read.

References

https://www.exploit-db.com/exploits/3413

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10792

http://www.vupen.com/english/advisories/2007/2374

http://www.vupen.com/english/advisories/2007/1991

http://www.ubuntu.com/usn/usn-455-1

http://www.securityfocus.com/bid/22805

http://www.novell.com/linux/security/advisories/2007_32_php.html

http://www.debian.org/security/2007/dsa-1283

http://www.debian.org/security/2007/dsa-1282

http://security.gentoo.org/glsa/glsa-200703-21.xml

http://secunia.com/advisories/25850

http://secunia.com/advisories/25423

http://secunia.com/advisories/25062

http://secunia.com/advisories/25057

http://secunia.com/advisories/25056

http://secunia.com/advisories/25025

http://secunia.com/advisories/24606

http://secunia.com/advisories/24514

http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3