Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-1938

Опубликовано: 31 мая 2011
Источник: nvd
CVSS2: 7.5
EPSS Средний

Описание

Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:php:php:5.3.3:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.3.4:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.3.5:*:*:*:*:*:*:*
cpe:2.3:a:php:php:5.3.6:*:*:*:*:*:*:*

EPSS

Процентиль: 98%
0.53387
Средний

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
около 14 лет назад

Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.

redhat
около 14 лет назад

Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.

debian
около 14 лет назад

Stack-based buffer overflow in the socket_connect function in ext/sock ...

github
около 3 лет назад

Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.

oracle-oval
почти 14 лет назад

ELSA-2011-1423: php53 and php security update (MODERATE)

EPSS

Процентиль: 98%
0.53387
Средний

7.5 High

CVSS2

Дефекты

CWE-119