|
|
CVE Reference: CVE-2006-4431 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2006-4431 |
|
|
Description: Multiple buffer overflows in the (a) Session Clustering Daemon and the (b) mod_cluster module in the Zend Platform 2.2.1 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a (1) empty or (2) crafted PHP session identifier (PHPSESSID). |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/28573 SREASON http://securityreason.com/securityalert/1466 SAID Secunia Advisory: SA21573 OSVDB 28231 28230 MISC http://www.hardened-php.net/advisory_052006.128.html FULLDISC http://marc.theaimsgroup.com/?l=full-disclosure&m=115642248226217&w=2 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/444263/100/0/threaded BID 19692 |
|
| Return to the previous page. |
