NVD

Id
53767  
Name
CVE-2007-1583  
Description
The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag and does not disable it in certain cases when a script terminates, which allows remote attackers to invoke available PHP scripts with register_globals functionality that is not detectable by these scripts, as demonstrated by forcing a memory_limit violation.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-03-21  
Modified Date
2011-03-07  
Seq
2007-1583  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
272516 53767 CVE-2007-1583 http://docs.info.apple.com/article.html?artnum=306172  View
272517 53767 CVE-2007-1583 APPLE-SA-2007-07-31  View
272518 53767 CVE-2007-1583 oval:org.mitre.oval:def:10245  View
272519 53767 CVE-2007-1583 RHSA-2007:0155  View
272520 53767 CVE-2007-1583 GLSA-200705-19  View
272521 53767 CVE-2007-1583 http://us2.php.net/releases/4_4_7.php  View
272522 53767 CVE-2007-1583 http://us2.php.net/releases/5_2_2.php  View
272523 53767 CVE-2007-1583 DSA-1283  View
272524 53767 CVE-2007-1583 MDKSA-2007:088  View
272525 53767 CVE-2007-1583 MDKSA-2007:089  View
272526 53767 CVE-2007-1583 MDKSA-2007:090  View
272527 53767 CVE-2007-1583 SUSE-SA:2007:032  View
272528 53767 CVE-2007-1583 http://www.php-security.org/MOPB/MOPB-26-2007.html  View
272529 53767 CVE-2007-1583 RHSA-2007:0153  View
272530 53767 CVE-2007-1583 RHSA-2007:0162  View
272531 53767 CVE-2007-1583 20070418 rPSA-2007-0073-1 php php-mysql php-pgsql  View
272532 53767 CVE-2007-1583 23016  View
272533 53767 CVE-2007-1583 25159  View
272534 53767 CVE-2007-1583 USN-455-1  View
272535 53767 CVE-2007-1583 ADV-2007-2732  View
272536 53767 CVE-2007-1583 https://issues.rpath.com/browse/RPL-1268  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51609 JVNDB-2007-000271 PHP の mb_parse_str() 関数おける register_globals ディレクティブが有効になる脆弱性 PHP の mb_parse_str() 関数には、memory_limit 違反による割り込みが発生した場合に、そのプロセス内で register_globals ディレクティブが有効となってしまう問題が存在します。 CVE-2007-1583 24938 CVE-2007-1583 53767 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000271.html 2007-03-18 2007-07-23 View