NVD

Id
53898  
Name
CVE-2007-1718  
Description
CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct spam attacks via a control character immediately following folding of the (1) Subject or (2) To parameter, as demonstrated by a parameter containing a " " sequence, related to an increment bug in the SKIP_LONG_HEADER_SEP macro.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:C/A:N)  
Pub Date
2017-01-07  
Published
2007-03-27  
Modified Date
2013-08-13  
Seq
2007-1718  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
273279 53898 CVE-2007-1718 oval:org.mitre.oval:def:10951  View
273280 53898 CVE-2007-1718 RHSA-2007:0155  View
273281 53898 CVE-2007-1718 GLSA-200705-19  View
273282 53898 CVE-2007-1718 http://us2.php.net/releases/5_2_2.php  View
273283 53898 CVE-2007-1718 DSA-1282  View
273284 53898 CVE-2007-1718 DSA-1283  View
273285 53898 CVE-2007-1718 MDKSA-2007:087  View
273286 53898 CVE-2007-1718 MDKSA-2007:088  View
273287 53898 CVE-2007-1718 MDKSA-2007:089  View
273288 53898 CVE-2007-1718 MDKSA-2007:090  View
273289 53898 CVE-2007-1718 SUSE-SA:2007:032  View
273290 53898 CVE-2007-1718 http://www.php-security.org/MOPB/MOPB-34-2007.html  View
273291 53898 CVE-2007-1718 RHSA-2007:0153  View
273292 53898 CVE-2007-1718 RHSA-2007:0162  View
273293 53898 CVE-2007-1718 23145  View
273294 53898 CVE-2007-1718 1017946  View
273295 53898 CVE-2007-1718 USN-455-1  View
273296 53898 CVE-2007-1718 php-mailfunction-header-injection(33516)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51610 JVNDB-2007-000272 PHP の mail() 関数おける CRLF インジェクションの脆弱性 PHP の mail() 関数には、Subject と To ヘッダの改行コードの処理に不備が存在するために、CRLF インジェクションの脆弱性が存在します。 CVE-2007-1718 25073 CVE-2007-1718 53898 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000272.html 2007-03-26 2007-07-23 View