NVD

Id
55943  
Name
CVE-2007-3799  
Description
The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from (1) PATH_INFO, (2) the session_id function, and (3) the session_start function, which are not encoded or filtered when the new session cookie is generated, a related issue to CVE-2006-0207.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-07-16  
Modified Date
2012-10-30  
Seq
2007-3799  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
284607 55943 CVE-2007-3799 http://docs.info.apple.com/article.html?artnum=307562  View
284608 55943 CVE-2007-3799 APPLE-SA-2008-03-18  View
284609 55943 CVE-2007-3799 oval:org.mitre.oval:def:9792  View
284610 55943 CVE-2007-3799 RHSA-2007:0889  View
284611 55943 CVE-2007-3799 http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm  View
284612 55943 CVE-2007-3799 DSA-1444  View
284613 55943 CVE-2007-3799 DSA-1578  View
284614 55943 CVE-2007-3799 MDKSA-2007:187  View
284615 55943 CVE-2007-3799 SUSE-SR:2007:015  View
284616 55943 CVE-2007-3799 http://www.php-security.org/MOPB/PMOPB-46-2007.html  View
284617 55943 CVE-2007-3799 RHSA-2007:0888  View
284618 55943 CVE-2007-3799 RHSA-2007:0890  View
284619 55943 CVE-2007-3799 RHSA-2007:0891  View
284620 55943 CVE-2007-3799 24268  View
284621 55943 CVE-2007-3799 USN-549-2  View
284622 55943 CVE-2007-3799 USN-549-1  View
284623 55943 CVE-2007-3799 ADV-2008-0924  View
284624 55943 CVE-2007-3799 https://issues.rpath.com/browse/RPL-1693  View
284625 55943 CVE-2007-3799 https://launchpad.net/bugs/173043  View
284626 55943 CVE-2007-3799 FEDORA-2007-709  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52044 JVNDB-2007-000707 PHP におけるセッション cookie に任意の属性を挿入される脆弱性 PHP における ext/session の session_start() 関数には、新しいセッション cookie が生成された際、PATH_INFO もしくは session_id() 関数、session_start() 関数により取得された cookie はエンコードされていないため、不正な文字列を介することでセッション cookie に任意の属性を挿入される脆弱性が存在します。 CVE-2007-3799 27154 CVE-2007-3799 55943 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000707.html 2007-07-16 2008-04-01 View