Secunia

Daniel Papasian has reported a vulnerability in the PECL Alternative PHP Cache (APC) extension, which can be exploited by malicious users to bypass certain security restrictions and potentially by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the "apc_search_paths" function in apc.c. This can be exploited to cause a stack-based buffer overflow e.g. via a specially crafted, overly long filename passed to the "include()" function.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in version 3.0.16. Other versions may also be affected.

Solution
Update to version 3.0.17.
Further details available in Customer Area

Provided and/or discovered by
Daniel Papasian

Original Advisory
PECL APC:
http://pecl.php.net/bugs/bug.php?id=13415

Daniel Papasian:
http://papasian.org/~dannyp/apcsmash.php.txt

Deep Links
Links available in Customer Area