CVE-2007-1864

CVSS V2 High 7.5 CVSS V3 None
Description
Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.
Overview
  • CVE ID
  • CVE-2007-1864
  • Assigner
  • secalert@redhat.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2007-05-09T00:19:00
  • Last Modified Date
  • 2019-05-22T18:44:44
Weakness Enumerations
CWE URL
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:php:php:*:*:*:*:*:*:*:* 1 OR 4.4.7
cpe:2.3:a:php:php:*:*:*:*:*:*:*:* 1 OR 5.1.0 5.1.6
cpe:2.3:a:php:php:*:*:*:*:*:*:*:* 1 OR 5.2.0 5.2.2
cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:* 1 OR
cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:P/I:P/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • PARTIAL
  • Base Score
  • 7.5
  • Severity
  • HIGH
  • Exploitability Score
  • 10
  • Impact Score
  • 6.4
References
Reference URL Reference Tags
http://us2.php.net/releases/4_4_7.php Patch Vendor Advisory
http://us2.php.net/releases/5_2_2.php Patch Vendor Advisory
https://rhn.redhat.com/errata/RHSA-2007-0348.html Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0349.html Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0355.html Third Party Advisory
http://www.securitytracker.com/id?1018024 Third Party Advisory VDB Entry
http://secunia.com/advisories/25187 Permissions Required Third Party Advisory
http://secunia.com/advisories/25191 Permissions Required Third Party Advisory
http://www.trustix.org/errata/2007/0017/ Broken Link
http://secunia.com/advisories/25255 Permissions Required Third Party Advisory
http://support.avaya.com/elmodocs2/security/ASA-2007-231.htm Third Party Advisory
https://issues.rpath.com/browse/RPL-1693 Broken Link
http://www.debian.org/security/2007/dsa-1330 Third Party Advisory
http://www.debian.org/security/2007/dsa-1331 Third Party Advisory
http://security.gentoo.org/glsa/glsa-200705-19.xml Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:102 Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:103 Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html Mailing List Third Party Advisory
http://www.ubuntu.com/usn/usn-485-1 Third Party Advisory
http://www.securityfocus.com/bid/23813 Third Party Advisory VDB Entry
http://secunia.com/advisories/25445 Permissions Required Third Party Advisory
http://secunia.com/advisories/25660 Permissions Required Third Party Advisory
http://secunia.com/advisories/25938 Permissions Required Third Party Advisory
http://secunia.com/advisories/25945 Permissions Required Third Party Advisory
http://secunia.com/advisories/26048 Permissions Required Third Party Advisory
http://secunia.com/advisories/26102 Permissions Required Third Party Advisory
http://secunia.com/advisories/27377 Permissions Required Third Party Advisory
http://www.vupen.com/english/advisories/2007/2187 Permissions Required Third Party Advisory
http://osvdb.org/34674 Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11257 Third Party Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2007-1864
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1864
History
Created Old Value New Value Data Type Notes
2022-05-10 07:51:46 Added to TrackCVE