6.8

CVE-2008-1488

Exploit
Stack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 through 3.0.16 allows remote attackers to execute arbitrary code via a long filename.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pecl-php ≫ Alternative Php Cache Version3.0.11
Pecl-php ≫ Alternative Php Cache Version3.0.12
Pecl-php ≫ Alternative Php Cache Version3.0.12p1
Pecl-php ≫ Alternative Php Cache Version3.0.12p2
Pecl-php ≫ Alternative Php Cache Version3.0.13
Pecl-php ≫ Alternative Php Cache Version3.0.14
Pecl-php ≫ Alternative Php Cache Version3.0.15
Pecl-php ≫ Alternative Php Cache Version3.0.16
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.81% 0.939
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://papasian.org/~dannyp/apcsmash.php.txt
http://pecl.php.net/bugs/bug.php?id=13415
Exploit
http://secunia.com/advisories/29509
Vendor Advisory
http://secunia.com/advisories/29745
Vendor Advisory
http://secunia.com/advisories/31082
http://security.gentoo.org/glsa/glsa-200804-07.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2008:082
http://www.securityfocus.com/bid/28457
https://exchange.xforce.ibmcloud.com/vulnerabilities/41420
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00548.html
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00582.html