SB2018101522 - Multiple vulnerabilities in PHP 

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2018101522

SB2018101522 - Multiple vulnerabilities in PHP

Published: October 15, 2018 Updated: June 12, 2025

Security Bulletin ID SB2018101522
Severity
Medium
Patch available
YES
Number of vulnerabilities 4
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Medium 75% Low 25%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 secuirty vulnerabilities.


1) Input validation error (CVE-ID: CVE-2007-5424)

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The disable_functions feature in PHP 4 and 5 allows attackers to bypass intended restrictions by using an alias, as demonstrated by using ini_alter when ini_set is disabled.


2) Buffer overflow (CVE-ID: CVE-2007-0988)

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument. Availability also affected by time out alarm for the script, which helps prevent infinite loops.


3) Input validation error (CVE-ID: CVE-2007-0908)

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.


4) Input validation error (CVE-ID: CVE-2006-1014)

The vulnerability allows a local user to read and manipulate data.

Argument injection vulnerability in certain PHP 4.x and 5.x applications, when used with sendmail and when accepting remote input for the additional_parameters argument to the mb_send_mail function, allows context-dependent attackers to read and create arbitrary files by providing extra -C and -X arguments to sendmail. NOTE: it could be argued that this is a class of technology-specific vulnerability, instead of a particular instance; if so, then this should not be included in CVE. This vulnerability affects all versions of PHP from 4.0.x through 5.1.x


Remediation

Install update from vendor's website.

References