CVE-2007-1413

EPSS 11.1%

Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably other PHP 4 versions, allows context-dependent attackers to execute arbitrary code via a long value in the third argument (object id).

Affected products

n/a · n/a

public PoCs found — 3

cve_referencewww.exploit-db.com/exploits/3439unverified cve_referencewww.exploit-db.com/exploits/4204unverified exploitdbwww.exploit-db.com/exploits/4274unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://retrogod.altervista.org/php_446_snmpget_local_bof.html http://secunia.com/advisories/24440 https://exchange.xforce.ibmcloud.com/vulnerabilities/35517 https://www.exploit-db.com/exploits/3439 https://www.exploit-db.com/exploits/4204 http://www.securityfocus.com/bid/22893