• info
• discussion
• exploit
• solution
• references

PHP CVE-2007-1401 Local Security Vulnerability

PHP is prone to a local security vulnerability. Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4.4.6 and other versions before 5.0.0, might allow local users to gain privileges via a long argument to the crack_opendict function.