NVD

Id
8810  
Name
CVE-2011-1938  
Description
Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-05-31  
Modified Date
2016-08-22  
Seq
2011-1938  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
50786 8810 CVE-2011-1938 APPLE-SA-2012-02-01-1  View
50787 8810 CVE-2011-1938 SSRT100826  View
50788 8810 CVE-2011-1938 [oss-security] 20110523 CVE request: PHP socket_connect() - stack buffer overflow  View
50789 8810 CVE-2011-1938 [oss-security] 20110524 Re: CVE request: PHP socket_connect() - stack buffer overflow  View
50790 8810 CVE-2011-1938 8262  View
50791 8810 CVE-2011-1938 8294  View
50792 8810 CVE-2011-1938 http://support.apple.com/kb/HT5130  View
50793 8810 CVE-2011-1938 http://svn.php.net/viewvc/php/php-src/trunk/ext/sockets/sockets.c?r1=311369&r2=311368&pathrev=311369  View
50794 8810 CVE-2011-1938 http://svn.php.net/viewvc?view=revision&revision=311369  View
50795 8810 CVE-2011-1938 DSA-2399  View
50796 8810 CVE-2011-1938 17318  View
50797 8810 CVE-2011-1938 MDVSA-2011:165  View
50798 8810 CVE-2011-1938 http://www.php.net/archive/2011.php#id2011-08-18-1  View
50799 8810 CVE-2011-1938 http://www.php.net/ChangeLog-5.php#5.3.7  View
50800 8810 CVE-2011-1938 RHSA-2011:1423  View
50801 8810 CVE-2011-1938 49241  View
50802 8810 CVE-2011-1938 php-socketconnect-bo(67606)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31967 JVNDB-2011-002207 PHP の socket_connect 関数におけるスタックベースのバッファオーバーフローの脆弱性 PHP の ext/sockets/sockets.c 内にある socket_connect 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2011-1938 49845 CVE-2011-1938 8810 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002207.html 2011-05-31 2011-09-13 View