CVEvulnerability
CVE-2007-1401
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-03-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Description
Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4.4.6 and other versions before 5.0.0, might allow local users to gain privileges via a long argument to the crack_opendict function.
Affected configurations
• php php 4.4.6
References
- http://retrogod.altervista.org/php_446_crack_opendict_local_bof.html Exploit
- http://securityreason.com/securityalert/2405 securityreason.com
- http://www.securityfocus.com/archive/1/462226/100/0/threaded www.securityfocus.com
- https://www.exploit-db.com/exploits/3431 www.exploit-db.com
- http://retrogod.altervista.org/php_446_crack_opendict_local_bof.html Exploit
- http://securityreason.com/securityalert/2405 securityreason.com
- http://www.securityfocus.com/archive/1/462226/100/0/threaded www.securityfocus.com
- https://www.exploit-db.com/exploits/3431 www.exploit-db.com