Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

PHP MySQL_Connect Remote Buffer Overflow Vulnerability

PHP is prone to a remote buffer overflow vulnerability.

An attacker can exploit this issue to execute arbitrary machine code in the context of the affected Web server. Failed exploit attempts will likely result in crashing the Web server, denying service to legitimate users.

It should be noted that arguments to the 'mysql_connect' function are not usually accessible for modification by remote attackers. This may limit the possible exploitation to legitimate users and administrators in a shared hosting environment.

PHP for Microsoft Windows versions 4.3.10, 4.4.0, and 4.4.1 are vulnerable; other versions may also be affected.







 

Privacy Statement
Copyright 2009, SecurityFocus