Lucene search

K

[email protected]NVD:CVE-2007-1825

HistoryApr 02, 2007 - 11:19 p.m.

CVE-2007-1825

2007-04-0223:19:00

[email protected]

web.nvd.nist.gov

1

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

High

0.043 Low

EPSS

Percentile

92.4%

Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrary code via a long boundary string in a type.parameters field. NOTE: as of 20070411, it appears that this issue might be subsumed by CVE-2007-0906.3.

Affected configurations

NVD

Node

phpphpMatch4.0.0

OR

phpphpMatch4.0.1

OR

phpphpMatch4.0.1patch1

OR

phpphpMatch4.0.1patch2

OR

phpphpMatch4.0.2

OR

phpphpMatch4.0.3

OR

phpphpMatch4.0.3patch1

OR

phpphpMatch4.0.4

OR

phpphpMatch4.0.4patch1

OR

phpphpMatch4.0.5

OR

phpphpMatch4.0.6

OR

phpphpMatch4.0.7

OR

phpphpMatch4.0.7rc1

OR

phpphpMatch4.0.7rc2

OR

phpphpMatch4.0.7rc3

OR

phpphpMatch4.1.0

OR

phpphpMatch4.1.1

OR

phpphpMatch4.1.2

OR

phpphpMatch4.2dev

OR

phpphpMatch4.2.0

OR

phpphpMatch4.2.1

OR

phpphpMatch4.2.2

OR

phpphpMatch4.2.3

OR

phpphpMatch4.3.0

OR

phpphpMatch4.3.1

OR

phpphpMatch4.3.2

OR

phpphpMatch4.3.3

OR

phpphpMatch4.3.4

OR

phpphpMatch4.3.5

OR

phpphpMatch4.3.6

OR

phpphpMatch4.3.7

OR

phpphpMatch4.3.8

OR

phpphpMatch4.3.9

OR

phpphpMatch4.3.10

OR

phpphpMatch4.3.11

OR

phpphpMatch4.4.0

OR

phpphpMatch4.4.1

OR

phpphpMatch4.4.2

OR

phpphpMatch4.4.3

OR

phpphpMatch4.4.4

OR

phpphpMatch5.0rc1

OR

phpphpMatch5.0rc2

OR

phpphpMatch5.0rc3

OR

phpphpMatch5.0.0

OR

phpphpMatch5.0.1

OR

phpphpMatch5.0.2

OR

phpphpMatch5.0.3

OR

phpphpMatch5.0.4

OR

phpphpMatch5.0.5

OR

phpphpMatch5.1.0

OR

phpphpMatch5.1.1

OR

phpphpMatch5.1.2

OR

phpphpMatch5.1.3

OR

phpphpMatch5.1.4

OR

phpphpMatch5.1.5

OR

phpphpMatch5.1.6

References

www.php-security.org/MOPB/MOPB-40-2007.html

www.securityfocus.com/bid/23234

exchange.xforce.ibmcloud.com/vulnerabilities/33534

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10377

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8 High

AI Score

Confidence

High

0.043 Low

EPSS

Percentile

92.4%

Related for NVD:CVE-2007-1825

prion3 cve3 ubuntucve3 cvelist3 nvd2 securityvulns2 openvas32 veracode1 redhatcve3 redhat4 centos2 nessus21 oraclelinux2 fedora4 osv1 slackware1 ubuntu2 freebsd1 debian1 suse2 gentoo1