Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a long first argument to the msql_connect function.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Php | Php | 5.2.3 (including) | 5.2.3 (including) |
| Php5 | Ubuntu | upstream | * |
References
- http://www.securityfocus.com/archive/1/475660/100/0/threaded
- http://www.securityfocus.com/bid/25213
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35830
- https://www.exploit-db.com/exploits/4260
- http://www.securityfocus.com/archive/1/475660/100/0/threaded
- http://www.securityfocus.com/bid/25213
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35830
- https://www.exploit-db.com/exploits/4260