Secunia Logo
 
CVE Reference: CVE-2007-1411
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-1411

Description:
Buffer overflow in PHP 4.4.6 and earlier, and unspecified PHP 5 versions, allows local and possibly remote attackers to execute arbitrary code via long server name arguments to the (1) mssql_connect and (2) mssql_pconnect functions.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/32885

SREASON
  http://securityreason.com/securityalert/2407

SAID
  Secunia Advisory: SA24353

MISC
  http://retrogod.altervista.org/php_446_mssql_connect_bof.html

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/462010/100/0/threaded

BID
  22832


Return to the previous page.