Published: 31/05/2011 Updated: 17/08/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 760

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 up to and including 5.3.6 might allow context-dependent malicious users to execute arbitrary code via a long pathname for a UNIX socket.

Vulnerable Product	Search on Vulmon	Subscribe to Product
php php 5.3.4
php php 5.3.5
php php 5.3.3
php php 5.3.6

Several security issues were fixed in PHP ...

Several vulnerabilities have been discovered in PHP, the web scripting language The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2011-1938 The UNIX socket handling allowed attackers to trigger a buffer overflow via a long path name CVE-2011-2483 The crypt_blowfish function did not properly handle 8-bit ...

PHP before 537 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger a buffer overflow by leveraging the ability to provide an arbitrary value for a function argument, related ...

<?php // Credit: Mateusz Kocielski, Marek Kroemeke and Filip Palian // Affected Versions: 533-536 echo "[+] CVE-2011-1938"; echo "[+] there we go\n"; define('EVIL_SPACE_ADDR', "\xff\xff\xee\xb3"); define('EVIL_SPACE_SIZE', 1024*1024*8); $SHELLCODE = "\x6a\x31\x58\x99\xcd\x80\x89\xc3\x89\xc1\x6a\x46\x58\xcd\x80\xb0" "\ ...

<?php /* ** Jonathan Salwan - @jonathansalwan ** shell-stormorg ** 2011-06-04 ** ** cvemitreorg/cgi-bin/cvenamecgi?name=CVE-2011-1938 ** ** Stack-based buffer overflow in the socket_connect function in ext/sockets/socketsc ** in PHP 533 through 536 might allow context-dependent attackers to execute arbitrary ** code via a ...

PHP socket connect() stack buffer overflow proof of concept code ...

PHP version 536 proof of concept buffer overflow exploit ...

CWE-119 http://www.exploit-db.com/exploits/17318/http://openwall.com/lists/oss-security/2011/05/24/9 http://openwall.com/lists/oss-security/2011/05/24/1 http://svn.php.net/viewvc/php/php-src/trunk/ext/sockets/sockets.c?r1=311369&r2=311368&pathrev=311369 http://svn.php.net/viewvc?view=revision&revision=311369 http://osvdb.org/72644 http://www.securityfocus.com/bid/49241 http://www.php.net/archive/2011.php#id2011-08-18-1 http://www.php.net/ChangeLog-5.php#5.3.7 http://securityreason.com/securityalert/8294 http://securityreason.com/securityalert/8262 http://www.redhat.com/support/errata/RHSA-2011-1423.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:165 http://support.apple.com/kb/HT5130 http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html http://www.debian.org/security/2012/dsa-2399 http://marc.info/?l=bugtraq&m=133469208622507&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/67606 https://usn.ubuntu.com/1231-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/17318/

CVE-2011-1938

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect