csaf_redhat - rhsa-2007

rhsa-2007_0088

Vulnerability from csaf_redhat

Published

2007-02-22 11:11

Modified

2024-11-14 10:05

Summary

Red Hat Security Advisory: php security update

Notes

Topic

Updated PHP packages that fix several security issues are now available for Red Hat Application Stack v1.1. This update has been rated as having important security impact by the Red Hat Security Response Team.

Details

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A number of buffer overflow flaws were found in the PHP session extension; the str_replace() function; and the imap_mail_compose() function. If very long strings were passed to the str_replace() function, an integer overflow could occur in memory allocation. If a script used the imap_mail_compose() function to create a new MIME message based on an input body from an untrusted source, it could result in a heap overflow. An attacker with access to a PHP application affected by any these issues could trigger the flaws and possibly execute arbitrary code as the 'apache' user. (CVE-2007-0906) When unserializing untrusted data on 64-bit platforms, the zend_hash_init() function could be forced into an infinite loop, consuming CPU resources for a limited time, until the script timeout alarm aborted execution of the script. (CVE-2007-0988) If the wddx extension was used to import WDDX data from an untrusted source, certain WDDX input packets could expose a random portion of heap memory. (CVE-2007-0908) If the odbc_result_all() function was used to display data from a database, and the database table contents were under an attacker's control, a format string vulnerability was possible which could allow arbitrary code execution. (CVE-2007-0909) A one byte memory read always occurs before the beginning of a buffer. This could be triggered, for example, by any use of the header() function in a script. However it is unlikely that this would have any effect. (CVE-2007-0907) Several flaws in PHP could allow attackers to "clobber" certain super-global variables via unspecified vectors. (CVE-2007-0910) Red Hat would like to thank Stefan Esser for his help diagnosing these issues.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated PHP packages that fix several security issues are now available for\nRed Hat Application Stack v1.1.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "PHP is an HTML-embedded scripting language commonly used with the Apache\nHTTP Web server. \n\nA number of buffer overflow flaws were found in the PHP session extension;\nthe str_replace() function; and the imap_mail_compose() function. If very\nlong strings were passed to the str_replace() function, an integer overflow\ncould occur in memory allocation. If a script used the imap_mail_compose()\nfunction to create a new MIME message based on an input body from an\nuntrusted source, it could result in a heap overflow. An attacker with\naccess to a PHP application affected by any these issues could trigger the\nflaws and possibly execute arbitrary code as the \u0027apache\u0027 user.\n(CVE-2007-0906)\n\nWhen unserializing untrusted data on 64-bit platforms, the zend_hash_init()\nfunction could be forced into an infinite loop, consuming CPU resources for\na limited time, until the script timeout alarm aborted execution of the\nscript. (CVE-2007-0988)\n\nIf the wddx extension was used to import WDDX data from an untrusted\nsource, certain WDDX input packets could expose a random portion of heap\nmemory. (CVE-2007-0908)\n\nIf the odbc_result_all() function was used to display data from a database,\nand the database table contents were under an attacker\u0027s control, a format\nstring vulnerability was possible which could allow arbitrary code\nexecution. (CVE-2007-0909)\n\nA one byte memory read always occurs before the beginning of a buffer. This\ncould be triggered, for example, by any use of the header() function in a\nscript. However it is unlikely that this would have any effect.\n(CVE-2007-0907)\n\nSeveral flaws in PHP could allow attackers to \"clobber\" certain\nsuper-global variables via unspecified vectors. (CVE-2007-0910)\n\nRed Hat would like to thank Stefan Esser for his help diagnosing these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2007:0088",
        "url": "https://access.redhat.com/errata/RHSA-2007:0088"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "229337",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=229337"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0088.json"
      }
    ],
    "title": "Red Hat Security Advisory: php security update",
    "tracking": {
      "current_release_date": "2024-11-14T10:05:07+00:00",
      "generator": {
        "date": "2024-11-14T10:05:07+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.0"
        }
      },
      "id": "RHSA-2007:0088",
      "initial_release_date": "2007-02-22T11:11:00+00:00",
      "revision_history": [
        {
          "date": "2007-02-22T11:11:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2007-02-22T06:11:10+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-14T10:05:07+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
                "product": {
                  "name": "Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
                  "product_id": "4AS-RHWAS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_application_stack:1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
                "product": {
                  "name": "Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
                  "product_id": "4ES-RHWAS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_application_stack:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Application Stack"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "php-dba-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-dba-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-dba-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-dba@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-common-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-common-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-common-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-common@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-soap-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-soap-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-soap-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-soap@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-xmlrpc@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-mbstring@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-mysql-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-mysql-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-mysql-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-mysql@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-gd-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-gd-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-gd-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-gd@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-ncurses@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-snmp-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-snmp-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-snmp-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-snmp@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-pdo-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-pdo-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-pdo-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-pdo@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-ldap-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-ldap-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-ldap-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-ldap@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-cli-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-cli-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-cli-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-cli@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-odbc-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-odbc-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-odbc-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-odbc@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-devel-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-devel-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-devel-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-devel@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-imap-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-imap-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-imap-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-imap@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-debuginfo@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-bcmath@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-pgsql@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-xml-0:5.1.6-3.el4s1.5.x86_64",
                "product": {
                  "name": "php-xml-0:5.1.6-3.el4s1.5.x86_64",
                  "product_id": "php-xml-0:5.1.6-3.el4s1.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-xml@5.1.6-3.el4s1.5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "php-dba-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-dba-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-dba-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-dba@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-common-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-common-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-common-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-common@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-soap-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-soap-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-soap-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-soap@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-xmlrpc@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-mbstring-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-mbstring-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-mbstring-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-mbstring@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-mysql-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-mysql-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-mysql-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-mysql@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-gd-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-gd-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-gd-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-gd@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-ncurses-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-ncurses-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-ncurses-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-ncurses@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-snmp-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-snmp-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-snmp-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-snmp@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-pdo-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-pdo-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-pdo-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-pdo@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-ldap-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-ldap-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-ldap-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-ldap@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-cli-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-cli-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-cli-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-cli@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-odbc-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-odbc-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-odbc-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-odbc@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-devel-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-devel-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-devel-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-devel@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-imap-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-imap-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-imap-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-imap@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-debuginfo-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-debuginfo-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-debuginfo-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-debuginfo@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-bcmath-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-bcmath-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-bcmath-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-bcmath@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-pgsql-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-pgsql-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-pgsql-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-pgsql@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "php-xml-0:5.1.6-3.el4s1.5.i386",
                "product": {
                  "name": "php-xml-0:5.1.6-3.el4s1.5.i386",
                  "product_id": "php-xml-0:5.1.6-3.el4s1.5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php-xml@5.1.6-3.el4s1.5?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "php-0:5.1.6-3.el4s1.5.src",
                "product": {
                  "name": "php-0:5.1.6-3.el4s1.5.src",
                  "product_id": "php-0:5.1.6-3.el4s1.5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/php@5.1.6-3.el4s1.5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-0:5.1.6-3.el4s1.5.src as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src"
        },
        "product_reference": "php-0:5.1.6-3.el4s1.5.src",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-bcmath-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-bcmath-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-bcmath-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-cli-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-cli-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-cli-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-cli-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-common-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-common-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-common-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-common-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-dba-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-dba-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-dba-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-dba-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-debuginfo-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-debuginfo-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-debuginfo-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-devel-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-devel-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-devel-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-devel-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-gd-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-gd-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-gd-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-gd-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-imap-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-imap-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-imap-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-imap-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-ldap-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-ldap-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-ldap-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-ldap-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-mbstring-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-mbstring-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-mbstring-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-mysql-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-mysql-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-mysql-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-mysql-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-ncurses-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-ncurses-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-ncurses-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-odbc-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-odbc-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-odbc-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-odbc-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-pdo-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-pdo-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-pdo-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-pdo-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-pgsql-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-pgsql-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-pgsql-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-snmp-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-snmp-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-snmp-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-snmp-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-soap-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-soap-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-soap-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-soap-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-xml-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-xml-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-xml-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-xml-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-xmlrpc-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux AS (v.4)",
          "product_id": "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4AS-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-0:5.1.6-3.el4s1.5.src as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src"
        },
        "product_reference": "php-0:5.1.6-3.el4s1.5.src",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-bcmath-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-bcmath-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-bcmath-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-cli-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-cli-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-cli-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-cli-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-common-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-common-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-common-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-common-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-dba-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-dba-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-dba-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-dba-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-debuginfo-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-debuginfo-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-debuginfo-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-devel-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-devel-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-devel-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-devel-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-gd-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-gd-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-gd-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-gd-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-imap-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-imap-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-imap-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-imap-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-ldap-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-ldap-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-ldap-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-ldap-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-mbstring-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-mbstring-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-mbstring-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-mysql-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-mysql-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-mysql-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-mysql-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-ncurses-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-ncurses-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-ncurses-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-odbc-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-odbc-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-odbc-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-odbc-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-pdo-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-pdo-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-pdo-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-pdo-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-pgsql-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-pgsql-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-pgsql-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-snmp-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-snmp-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-snmp-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-snmp-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-soap-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-soap-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-soap-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-soap-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-xml-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-xml-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-xml-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-xml-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-xmlrpc-0:5.1.6-3.el4s1.5.i386 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386"
        },
        "product_reference": "php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
        "relates_to_product_reference": "4ES-RHWAS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64 as a component of Red Hat Application Stack v1 for Enterprise Linux ES (v.4)",
          "product_id": "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
        },
        "product_reference": "php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
        "relates_to_product_reference": "4ES-RHWAS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2007-0906",
      "discovery_date": "2007-02-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618280"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the (1) session, (2) zip, (3) imap, and (4) sqlite extensions; (5) stream filters; and the (6) str_replace, (7) mail, (8) ibase_delete_user, (9) ibase_add_user, and (10) ibase_modify_user functions.  NOTE: vector 6 might actually be an integer overflow (CVE-2007-1885).  NOTE: as of 20070411, vector (3) might involve the imap_mail_compose function (CVE-2007-1825).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src",
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-0906"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618280",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618280"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-0906",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-0906"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-0906",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0906"
        }
      ],
      "release_date": "2007-02-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2007-02-22T11:11:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade.  Only those\nRPMs which are currently installed will be updated.  Those RPMs which are\nnot installed but included in the list will not be updated.  Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network.  Many\npeople find this an easier way to apply updates.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src",
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0088"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2007-0907",
      "discovery_date": "2007-02-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618281"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapi_header_op function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src",
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-0907"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618281",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618281"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-0907",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-0907"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-0907",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0907"
        }
      ],
      "release_date": "2007-02-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2007-02-22T11:11:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade.  Only those\nRPMs which are currently installed will be updated.  Those RPMs which are\nnot installed but included in the list will not be updated.  Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network.  Many\npeople find this an easier way to apply updates.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src",
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0088"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2007-0908",
      "discovery_date": "2007-02-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618282"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src",
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-0908"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618282",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618282"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-0908",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-0908"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-0908",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0908"
        }
      ],
      "release_date": "2007-02-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2007-02-22T11:11:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade.  Only those\nRPMs which are currently installed will be updated.  Those RPMs which are\nnot installed but included in the list will not be updated.  Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network.  Many\npeople find this an easier way to apply updates.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src",
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0088"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2007-0909",
      "discovery_date": "2007-02-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618283"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src",
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-0909"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618283",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618283"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-0909",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-0909"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-0909",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0909"
        }
      ],
      "release_date": "2007-02-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2007-02-22T11:11:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade.  Only those\nRPMs which are currently installed will be updated.  Those RPMs which are\nnot installed but included in the list will not be updated.  Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network.  Many\npeople find this an easier way to apply updates.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src",
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0088"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2007-0910",
      "discovery_date": "2007-02-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618284"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in PHP before 5.2.1 allows attackers to \"clobber\" certain super-global variables via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src",
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-0910"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618284",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618284"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-0910",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-0910"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-0910",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0910"
        }
      ],
      "release_date": "2007-02-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2007-02-22T11:11:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade.  Only those\nRPMs which are currently installed will be updated.  Those RPMs which are\nnot installed but included in the list will not be updated.  Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network.  Many\npeople find this an easier way to apply updates.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src",
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0088"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2007-0988",
      "discovery_date": "2007-02-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618285"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an \"a:2147483649:{\" argument.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src",
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-0988"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618285",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618285"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-0988",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-0988"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-0988",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-0988"
        }
      ],
      "release_date": "2007-02-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2007-02-22T11:11:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade.  Only those\nRPMs which are currently installed will be updated.  Those RPMs which are\nnot installed but included in the list will not be updated.  Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network.  Many\npeople find this an easier way to apply updates.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src",
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0088"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2007-1380",
      "discovery_date": "2007-02-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "240157"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context-dependent attackers to obtain sensitive information (memory contents) via a serialized variable entry with a large length value, which triggers a buffer over-read.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "php session extension information leak",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Our previous fixes for CVE-2007-0906 included a patch that also addressed the issue now given CVE name CVE-2007-1380.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src",
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-1380"
        },
        {
          "category": "external",
          "summary": "RHBZ#240157",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=240157"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-1380",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-1380"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-1380",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1380"
        }
      ],
      "release_date": "2007-02-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2007-02-22T11:11:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade.  Only those\nRPMs which are currently installed will be updated.  Those RPMs which are\nnot installed but included in the list will not be updated.  Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network.  Many\npeople find this an easier way to apply updates.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src",
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0088"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "php session extension information leak"
    },
    {
      "cve": "CVE-2007-1701",
      "discovery_date": "2007-02-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "240431"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with \"_SESSION|s:39:\".",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "php session extension global variable clobber",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This CVE name is a duplicate as the vulnerability is addressed by CVE-2007-0910.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src",
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-1701"
        },
        {
          "category": "external",
          "summary": "RHBZ#240431",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=240431"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-1701",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-1701"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-1701",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1701"
        }
      ],
      "release_date": "2007-02-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2007-02-22T11:11:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade.  Only those\nRPMs which are currently installed will be updated.  Those RPMs which are\nnot installed but included in the list will not be updated.  Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network.  Many\npeople find this an easier way to apply updates.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src",
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0088"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "php session extension global variable clobber"
    },
    {
      "cve": "CVE-2007-1825",
      "discovery_date": "2007-02-14T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "240426"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrary code via a long boundary string in a type.parameters field. NOTE: as of 20070411, it appears that this issue might be subsumed by CVE-2007-0906.3.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "php imap_mail_compose() buffer overflow via type.parameters",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This CVE name is a duplicate as the vulnerability is addressed by CVE-2007-0906.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src",
          "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
          "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
          "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src",
          "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
          "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
          "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2007-1825"
        },
        {
          "category": "external",
          "summary": "RHBZ#240426",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=240426"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2007-1825",
          "url": "https://www.cve.org/CVERecord?id=CVE-2007-1825"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2007-1825",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1825"
        }
      ],
      "release_date": "2007-02-14T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2007-02-22T11:11:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nTo update all RPMs for your particular architecture, run:\n\nrpm -Fvh [filenames]\n\nwhere [filenames] is a list of the RPMs you wish to upgrade.  Only those\nRPMs which are currently installed will be updated.  Those RPMs which are\nnot installed but included in the list will not be updated.  Note that you\ncan also use wildcards (*.rpm) if your current directory *only* contains the\ndesired RPMs.\n\nPlease note that this update is also available via Red Hat Network.  Many\npeople find this an easier way to apply updates.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.src",
            "4AS-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
            "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
            "4AS-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.src",
            "4ES-RHWAS:php-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-bcmath-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-cli-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-common-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-dba-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-debuginfo-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-devel-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-gd-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-imap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-ldap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-mbstring-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-mysql-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-ncurses-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-odbc-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-pdo-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-pgsql-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-snmp-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-soap-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-xml-0:5.1.6-3.el4s1.5.x86_64",
            "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.i386",
            "4ES-RHWAS:php-xmlrpc-0:5.1.6-3.el4s1.5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2007:0088"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "php imap_mail_compose() buffer overflow via type.parameters"
    }
  ]
}

cve-2007-0907

Vulnerability from cvelistv5

Published

2007-02-13 23:00

Modified

2024-08-07 12:34

Severity ?

Summary

Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapi_header_op function.

References

▼	URL	Tags
	http://www.us.debian.org/security/2007/dsa-1264	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/24295	third-party-advisory, x_refsource_SECUNIA
	http://www.trustix.org/errata/2007/0009/	vendor-advisory, x_refsource_TRUSTIX
	http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html	vendor-advisory, x_refsource_OPENPKG
	http://secunia.com/advisories/24195	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1017671	vdb-entry, x_refsource_SECTRACK
	http://osvdb.org/32767	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/24606	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24642	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24217	third-party-advisory, x_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm	x_refsource_CONFIRM
	http://secunia.com/advisories/24248	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24514	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/22496	vdb-entry, x_refsource_BID
	https://issues.rpath.com/browse/RPL-1088	x_refsource_CONFIRM
	http://secunia.com/advisories/24284	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-424-2	vendor-advisory, x_refsource_UBUNTU
	http://www.php.net/releases/5_2_1.php	x_refsource_CONFIRM
	http://security.gentoo.org/glsa/glsa-200703-21.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/24432	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24421	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24089	third-party-advisory, x_refsource_SECUNIA
	http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2007-0076.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/24419	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2007-0089.html	vendor-advisory, x_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2007-0088.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/archive/1/461462/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2007-0082.html	vendor-advisory, x_refsource_REDHAT
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11321	vdb-entry, signature, x_refsource_OVAL
	ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc	vendor-advisory, x_refsource_SGI
	http://www.php.net/ChangeLog-5.php#5.2.1	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDKSA-2007:048	vendor-advisory, x_refsource_MANDRIVA
	http://www.ubuntu.com/usn/usn-424-1	vendor-advisory, x_refsource_UBUNTU
	http://www.redhat.com/support/errata/RHSA-2007-0081.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/24322	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24236	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/0546	vdb-entry, x_refsource_VUPEN

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:34:21.309Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.us.debian.org/security/2007/dsa-1264"
          },
          {
            "name": "24295",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24295"
          },
          {
            "name": "2007-0009",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2007/0009/"
          },
          {
            "name": "OpenPKG-SA-2007.010",
            "tags": [
              "vendor-advisory",
              "x_refsource_OPENPKG",
              "x_transferred"
            ],
            "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html"
          },
          {
            "name": "24195",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24195"
          },
          {
            "name": "1017671",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1017671"
          },
          {
            "name": "32767",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/32767"
          },
          {
            "name": "24606",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24606"
          },
          {
            "name": "24642",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24642"
          },
          {
            "name": "24217",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24217"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm"
          },
          {
            "name": "24248",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24248"
          },
          {
            "name": "24514",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24514"
          },
          {
            "name": "22496",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22496"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1088"
          },
          {
            "name": "24284",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24284"
          },
          {
            "name": "USN-424-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-424-2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/releases/5_2_1.php"
          },
          {
            "name": "GLSA-200703-21",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
          },
          {
            "name": "24432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24432"
          },
          {
            "name": "24421",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24421"
          },
          {
            "name": "24089",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24089"
          },
          {
            "name": "SUSE-SA:2007:020",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html"
          },
          {
            "name": "RHSA-2007:0076",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0076.html"
          },
          {
            "name": "24419",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24419"
          },
          {
            "name": "RHSA-2007:0089",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0089.html"
          },
          {
            "name": "RHSA-2007:0088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0088.html"
          },
          {
            "name": "20070227 rPSA-2007-0043-1 php php-mysql php-pgsql",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/461462/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm"
          },
          {
            "name": "RHSA-2007:0082",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0082.html"
          },
          {
            "name": "oval:org.mitre.oval:def:11321",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11321"
          },
          {
            "name": "20070201-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php#5.2.1"
          },
          {
            "name": "MDKSA-2007:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:048"
          },
          {
            "name": "USN-424-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-424-1"
          },
          {
            "name": "RHSA-2007:0081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0081.html"
          },
          {
            "name": "24322",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24322"
          },
          {
            "name": "24236",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24236"
          },
          {
            "name": "ADV-2007-0546",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0546"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-02-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapi_header_op function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-16T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.us.debian.org/security/2007/dsa-1264"
        },
        {
          "name": "24295",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24295"
        },
        {
          "name": "2007-0009",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2007/0009/"
        },
        {
          "name": "OpenPKG-SA-2007.010",
          "tags": [
            "vendor-advisory",
            "x_refsource_OPENPKG"
          ],
          "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html"
        },
        {
          "name": "24195",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24195"
        },
        {
          "name": "1017671",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1017671"
        },
        {
          "name": "32767",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/32767"
        },
        {
          "name": "24606",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24606"
        },
        {
          "name": "24642",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24642"
        },
        {
          "name": "24217",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24217"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm"
        },
        {
          "name": "24248",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24248"
        },
        {
          "name": "24514",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24514"
        },
        {
          "name": "22496",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22496"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1088"
        },
        {
          "name": "24284",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24284"
        },
        {
          "name": "USN-424-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-424-2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/releases/5_2_1.php"
        },
        {
          "name": "GLSA-200703-21",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
        },
        {
          "name": "24432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24432"
        },
        {
          "name": "24421",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24421"
        },
        {
          "name": "24089",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24089"
        },
        {
          "name": "SUSE-SA:2007:020",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html"
        },
        {
          "name": "RHSA-2007:0076",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0076.html"
        },
        {
          "name": "24419",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24419"
        },
        {
          "name": "RHSA-2007:0089",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0089.html"
        },
        {
          "name": "RHSA-2007:0088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0088.html"
        },
        {
          "name": "20070227 rPSA-2007-0043-1 php php-mysql php-pgsql",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/461462/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm"
        },
        {
          "name": "RHSA-2007:0082",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0082.html"
        },
        {
          "name": "oval:org.mitre.oval:def:11321",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11321"
        },
        {
          "name": "20070201-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php#5.2.1"
        },
        {
          "name": "MDKSA-2007:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:048"
        },
        {
          "name": "USN-424-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-424-1"
        },
        {
          "name": "RHSA-2007:0081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0081.html"
        },
        {
          "name": "24322",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24322"
        },
        {
          "name": "24236",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24236"
        },
        {
          "name": "ADV-2007-0546",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0546"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0907",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapi_header_op function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-1264",
              "refsource": "DEBIAN",
              "url": "http://www.us.debian.org/security/2007/dsa-1264"
            },
            {
              "name": "24295",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24295"
            },
            {
              "name": "2007-0009",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2007/0009/"
            },
            {
              "name": "OpenPKG-SA-2007.010",
              "refsource": "OPENPKG",
              "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html"
            },
            {
              "name": "24195",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24195"
            },
            {
              "name": "1017671",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1017671"
            },
            {
              "name": "32767",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/32767"
            },
            {
              "name": "24606",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24606"
            },
            {
              "name": "24642",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24642"
            },
            {
              "name": "24217",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24217"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm"
            },
            {
              "name": "24248",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24248"
            },
            {
              "name": "24514",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24514"
            },
            {
              "name": "22496",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/22496"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1088",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1088"
            },
            {
              "name": "24284",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24284"
            },
            {
              "name": "USN-424-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-424-2"
            },
            {
              "name": "http://www.php.net/releases/5_2_1.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/releases/5_2_1.php"
            },
            {
              "name": "GLSA-200703-21",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
            },
            {
              "name": "24432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24432"
            },
            {
              "name": "24421",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24421"
            },
            {
              "name": "24089",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24089"
            },
            {
              "name": "SUSE-SA:2007:020",
              "refsource": "SUSE",
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html"
            },
            {
              "name": "RHSA-2007:0076",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0076.html"
            },
            {
              "name": "24419",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24419"
            },
            {
              "name": "RHSA-2007:0089",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0089.html"
            },
            {
              "name": "RHSA-2007:0088",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0088.html"
            },
            {
              "name": "20070227 rPSA-2007-0043-1 php php-mysql php-pgsql",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/461462/100/0/threaded"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm"
            },
            {
              "name": "RHSA-2007:0082",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0082.html"
            },
            {
              "name": "oval:org.mitre.oval:def:11321",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11321"
            },
            {
              "name": "20070201-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php#5.2.1",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php#5.2.1"
            },
            {
              "name": "MDKSA-2007:048",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:048"
            },
            {
              "name": "USN-424-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-424-1"
            },
            {
              "name": "RHSA-2007:0081",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0081.html"
            },
            {
              "name": "24322",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24322"
            },
            {
              "name": "24236",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24236"
            },
            {
              "name": "ADV-2007-0546",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/0546"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-0907",
    "datePublished": "2007-02-13T23:00:00",
    "dateReserved": "2007-02-13T00:00:00",
    "dateUpdated": "2024-08-07T12:34:21.309Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2007-0910

Vulnerability from cvelistv5

Published

2007-02-13 23:00

Modified

2024-08-07 12:34

Severity ?

Summary

Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors.

References

▼	URL	Tags
	http://www.us.debian.org/security/2007/dsa-1264	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/24295	third-party-advisory, x_refsource_SECUNIA
	http://www.trustix.org/errata/2007/0009/	vendor-advisory, x_refsource_TRUSTIX
	http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html	vendor-advisory, x_refsource_OPENPKG
	http://secunia.com/advisories/24195	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1017671	vdb-entry, x_refsource_SECTRACK
	http://osvdb.org/32763	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/24606	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24642	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/466166/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/24217	third-party-advisory, x_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm	x_refsource_CONFIRM
	http://secunia.com/advisories/24248	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24514	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/22496	vdb-entry, x_refsource_BID
	https://issues.rpath.com/browse/RPL-1088	x_refsource_CONFIRM
	http://secunia.com/advisories/24284	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-424-2	vendor-advisory, x_refsource_UBUNTU
	http://www.php.net/releases/5_2_1.php	x_refsource_CONFIRM
	http://security.gentoo.org/glsa/glsa-200703-21.xml	vendor-advisory, x_refsource_GENTOO
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9514	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/24432	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24421	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24089	third-party-advisory, x_refsource_SECUNIA
	http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2007-0076.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/24419	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24945	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2007-0089.html	vendor-advisory, x_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2007-0088.html	vendor-advisory, x_refsource_REDHAT
	https://issues.rpath.com/browse/RPL-1268	x_refsource_CONFIRM
	http://www.securityfocus.com/archive/1/461462/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2007-0082.html	vendor-advisory, x_refsource_REDHAT
	ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc	vendor-advisory, x_refsource_SGI
	http://www.php.net/ChangeLog-5.php#5.2.1	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDKSA-2007:048	vendor-advisory, x_refsource_MANDRIVA
	http://www.ubuntu.com/usn/usn-424-1	vendor-advisory, x_refsource_UBUNTU
	http://www.redhat.com/support/errata/RHSA-2007-0081.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/24322	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24236	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/0546	vdb-entry, x_refsource_VUPEN

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:34:21.320Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.us.debian.org/security/2007/dsa-1264"
          },
          {
            "name": "24295",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24295"
          },
          {
            "name": "2007-0009",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2007/0009/"
          },
          {
            "name": "OpenPKG-SA-2007.010",
            "tags": [
              "vendor-advisory",
              "x_refsource_OPENPKG",
              "x_transferred"
            ],
            "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html"
          },
          {
            "name": "24195",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24195"
          },
          {
            "name": "1017671",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1017671"
          },
          {
            "name": "32763",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/32763"
          },
          {
            "name": "24606",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24606"
          },
          {
            "name": "24642",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24642"
          },
          {
            "name": "20070418 rPSA-2007-0073-1 php php-mysql php-pgsql",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/466166/100/0/threaded"
          },
          {
            "name": "24217",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24217"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm"
          },
          {
            "name": "24248",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24248"
          },
          {
            "name": "24514",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24514"
          },
          {
            "name": "22496",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22496"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1088"
          },
          {
            "name": "24284",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24284"
          },
          {
            "name": "USN-424-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-424-2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/releases/5_2_1.php"
          },
          {
            "name": "GLSA-200703-21",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
          },
          {
            "name": "oval:org.mitre.oval:def:9514",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9514"
          },
          {
            "name": "24432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24432"
          },
          {
            "name": "24421",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24421"
          },
          {
            "name": "24089",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24089"
          },
          {
            "name": "SUSE-SA:2007:020",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html"
          },
          {
            "name": "RHSA-2007:0076",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0076.html"
          },
          {
            "name": "24419",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24419"
          },
          {
            "name": "24945",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24945"
          },
          {
            "name": "RHSA-2007:0089",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0089.html"
          },
          {
            "name": "RHSA-2007:0088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0088.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1268"
          },
          {
            "name": "20070227 rPSA-2007-0043-1 php php-mysql php-pgsql",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/461462/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm"
          },
          {
            "name": "RHSA-2007:0082",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0082.html"
          },
          {
            "name": "20070201-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php#5.2.1"
          },
          {
            "name": "MDKSA-2007:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:048"
          },
          {
            "name": "USN-424-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-424-1"
          },
          {
            "name": "RHSA-2007:0081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0081.html"
          },
          {
            "name": "24322",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24322"
          },
          {
            "name": "24236",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24236"
          },
          {
            "name": "ADV-2007-0546",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0546"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-02-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in PHP before 5.2.1 allows attackers to \"clobber\" certain super-global variables via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-16T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.us.debian.org/security/2007/dsa-1264"
        },
        {
          "name": "24295",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24295"
        },
        {
          "name": "2007-0009",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2007/0009/"
        },
        {
          "name": "OpenPKG-SA-2007.010",
          "tags": [
            "vendor-advisory",
            "x_refsource_OPENPKG"
          ],
          "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html"
        },
        {
          "name": "24195",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24195"
        },
        {
          "name": "1017671",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1017671"
        },
        {
          "name": "32763",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/32763"
        },
        {
          "name": "24606",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24606"
        },
        {
          "name": "24642",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24642"
        },
        {
          "name": "20070418 rPSA-2007-0073-1 php php-mysql php-pgsql",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/466166/100/0/threaded"
        },
        {
          "name": "24217",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24217"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm"
        },
        {
          "name": "24248",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24248"
        },
        {
          "name": "24514",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24514"
        },
        {
          "name": "22496",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22496"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1088"
        },
        {
          "name": "24284",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24284"
        },
        {
          "name": "USN-424-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-424-2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/releases/5_2_1.php"
        },
        {
          "name": "GLSA-200703-21",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
        },
        {
          "name": "oval:org.mitre.oval:def:9514",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9514"
        },
        {
          "name": "24432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24432"
        },
        {
          "name": "24421",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24421"
        },
        {
          "name": "24089",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24089"
        },
        {
          "name": "SUSE-SA:2007:020",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html"
        },
        {
          "name": "RHSA-2007:0076",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0076.html"
        },
        {
          "name": "24419",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24419"
        },
        {
          "name": "24945",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24945"
        },
        {
          "name": "RHSA-2007:0089",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0089.html"
        },
        {
          "name": "RHSA-2007:0088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0088.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1268"
        },
        {
          "name": "20070227 rPSA-2007-0043-1 php php-mysql php-pgsql",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/461462/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm"
        },
        {
          "name": "RHSA-2007:0082",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0082.html"
        },
        {
          "name": "20070201-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php#5.2.1"
        },
        {
          "name": "MDKSA-2007:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:048"
        },
        {
          "name": "USN-424-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-424-1"
        },
        {
          "name": "RHSA-2007:0081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0081.html"
        },
        {
          "name": "24322",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24322"
        },
        {
          "name": "24236",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24236"
        },
        {
          "name": "ADV-2007-0546",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0546"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0910",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in PHP before 5.2.1 allows attackers to \"clobber\" certain super-global variables via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-1264",
              "refsource": "DEBIAN",
              "url": "http://www.us.debian.org/security/2007/dsa-1264"
            },
            {
              "name": "24295",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24295"
            },
            {
              "name": "2007-0009",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2007/0009/"
            },
            {
              "name": "OpenPKG-SA-2007.010",
              "refsource": "OPENPKG",
              "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html"
            },
            {
              "name": "24195",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24195"
            },
            {
              "name": "1017671",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1017671"
            },
            {
              "name": "32763",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/32763"
            },
            {
              "name": "24606",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24606"
            },
            {
              "name": "24642",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24642"
            },
            {
              "name": "20070418 rPSA-2007-0073-1 php php-mysql php-pgsql",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/466166/100/0/threaded"
            },
            {
              "name": "24217",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24217"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm"
            },
            {
              "name": "24248",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24248"
            },
            {
              "name": "24514",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24514"
            },
            {
              "name": "22496",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/22496"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1088",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1088"
            },
            {
              "name": "24284",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24284"
            },
            {
              "name": "USN-424-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-424-2"
            },
            {
              "name": "http://www.php.net/releases/5_2_1.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/releases/5_2_1.php"
            },
            {
              "name": "GLSA-200703-21",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
            },
            {
              "name": "oval:org.mitre.oval:def:9514",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9514"
            },
            {
              "name": "24432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24432"
            },
            {
              "name": "24421",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24421"
            },
            {
              "name": "24089",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24089"
            },
            {
              "name": "SUSE-SA:2007:020",
              "refsource": "SUSE",
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html"
            },
            {
              "name": "RHSA-2007:0076",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0076.html"
            },
            {
              "name": "24419",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24419"
            },
            {
              "name": "24945",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24945"
            },
            {
              "name": "RHSA-2007:0089",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0089.html"
            },
            {
              "name": "RHSA-2007:0088",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0088.html"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1268",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1268"
            },
            {
              "name": "20070227 rPSA-2007-0043-1 php php-mysql php-pgsql",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/461462/100/0/threaded"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm"
            },
            {
              "name": "RHSA-2007:0082",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0082.html"
            },
            {
              "name": "20070201-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php#5.2.1",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php#5.2.1"
            },
            {
              "name": "MDKSA-2007:048",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:048"
            },
            {
              "name": "USN-424-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-424-1"
            },
            {
              "name": "RHSA-2007:0081",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0081.html"
            },
            {
              "name": "24322",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24322"
            },
            {
              "name": "24236",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24236"
            },
            {
              "name": "ADV-2007-0546",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/0546"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-0910",
    "datePublished": "2007-02-13T23:00:00",
    "dateReserved": "2007-02-13T00:00:00",
    "dateUpdated": "2024-08-07T12:34:21.320Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2007-0908

Vulnerability from cvelistv5

Published

2007-02-13 23:00

Modified

2024-08-07 12:34

Severity ?

Summary

The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.

References

▼	URL	Tags
	http://www.us.debian.org/security/2007/dsa-1264	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/24295	third-party-advisory, x_refsource_SECUNIA
	http://www.trustix.org/errata/2007/0009/	vendor-advisory, x_refsource_TRUSTIX
	http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html	vendor-advisory, x_refsource_OPENPKG
	http://secunia.com/advisories/24195	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1017671	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/24606	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24642	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24217	third-party-advisory, x_refsource_SECUNIA
	http://osvdb.org/32766	vdb-entry, x_refsource_OSVDB
	http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm	x_refsource_CONFIRM
	http://secunia.com/advisories/24248	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/32493	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/24514	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/22496	vdb-entry, x_refsource_BID
	https://issues.rpath.com/browse/RPL-1088	x_refsource_CONFIRM
	http://secunia.com/advisories/24284	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-424-2	vendor-advisory, x_refsource_UBUNTU
	http://www.php.net/releases/5_2_1.php	x_refsource_CONFIRM
	http://security.gentoo.org/glsa/glsa-200703-21.xml	vendor-advisory, x_refsource_GENTOO
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11185	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/24432	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24421	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24089	third-party-advisory, x_refsource_SECUNIA
	http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html	vendor-advisory, x_refsource_SUSE
	http://securityreason.com/securityalert/2321	third-party-advisory, x_refsource_SREASON
	http://www.redhat.com/support/errata/RHSA-2007-0076.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/24419	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2007-0089.html	vendor-advisory, x_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2007-0088.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/archive/1/461462/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2007-0082.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/22806	vdb-entry, x_refsource_BID
	ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc	vendor-advisory, x_refsource_SGI
	http://www.php.net/ChangeLog-5.php#5.2.1	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDKSA-2007:048	vendor-advisory, x_refsource_MANDRIVA
	http://www.php-security.org/MOPB/MOPB-11-2007.html	x_refsource_MISC
	http://www.ubuntu.com/usn/usn-424-1	vendor-advisory, x_refsource_UBUNTU
	http://www.redhat.com/support/errata/RHSA-2007-0081.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/24322	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24236	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/0546	vdb-entry, x_refsource_VUPEN

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:34:21.323Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.us.debian.org/security/2007/dsa-1264"
          },
          {
            "name": "24295",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24295"
          },
          {
            "name": "2007-0009",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2007/0009/"
          },
          {
            "name": "OpenPKG-SA-2007.010",
            "tags": [
              "vendor-advisory",
              "x_refsource_OPENPKG",
              "x_transferred"
            ],
            "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html"
          },
          {
            "name": "24195",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24195"
          },
          {
            "name": "1017671",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1017671"
          },
          {
            "name": "24606",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24606"
          },
          {
            "name": "24642",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24642"
          },
          {
            "name": "24217",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24217"
          },
          {
            "name": "32766",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/32766"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm"
          },
          {
            "name": "24248",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24248"
          },
          {
            "name": "php-wddx-information-disclosure(32493)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32493"
          },
          {
            "name": "24514",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24514"
          },
          {
            "name": "22496",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22496"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1088"
          },
          {
            "name": "24284",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24284"
          },
          {
            "name": "USN-424-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-424-2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/releases/5_2_1.php"
          },
          {
            "name": "GLSA-200703-21",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
          },
          {
            "name": "oval:org.mitre.oval:def:11185",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11185"
          },
          {
            "name": "24432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24432"
          },
          {
            "name": "24421",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24421"
          },
          {
            "name": "24089",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24089"
          },
          {
            "name": "SUSE-SA:2007:020",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html"
          },
          {
            "name": "2321",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/2321"
          },
          {
            "name": "RHSA-2007:0076",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0076.html"
          },
          {
            "name": "24419",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24419"
          },
          {
            "name": "RHSA-2007:0089",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0089.html"
          },
          {
            "name": "RHSA-2007:0088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0088.html"
          },
          {
            "name": "20070227 rPSA-2007-0043-1 php php-mysql php-pgsql",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/461462/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm"
          },
          {
            "name": "RHSA-2007:0082",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0082.html"
          },
          {
            "name": "22806",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22806"
          },
          {
            "name": "20070201-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php#5.2.1"
          },
          {
            "name": "MDKSA-2007:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:048"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.php-security.org/MOPB/MOPB-11-2007.html"
          },
          {
            "name": "USN-424-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-424-1"
          },
          {
            "name": "RHSA-2007:0081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0081.html"
          },
          {
            "name": "24322",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24322"
          },
          {
            "name": "24236",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24236"
          },
          {
            "name": "ADV-2007-0546",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0546"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-02-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-16T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.us.debian.org/security/2007/dsa-1264"
        },
        {
          "name": "24295",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24295"
        },
        {
          "name": "2007-0009",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2007/0009/"
        },
        {
          "name": "OpenPKG-SA-2007.010",
          "tags": [
            "vendor-advisory",
            "x_refsource_OPENPKG"
          ],
          "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html"
        },
        {
          "name": "24195",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24195"
        },
        {
          "name": "1017671",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1017671"
        },
        {
          "name": "24606",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24606"
        },
        {
          "name": "24642",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24642"
        },
        {
          "name": "24217",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24217"
        },
        {
          "name": "32766",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/32766"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm"
        },
        {
          "name": "24248",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24248"
        },
        {
          "name": "php-wddx-information-disclosure(32493)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32493"
        },
        {
          "name": "24514",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24514"
        },
        {
          "name": "22496",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22496"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1088"
        },
        {
          "name": "24284",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24284"
        },
        {
          "name": "USN-424-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-424-2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/releases/5_2_1.php"
        },
        {
          "name": "GLSA-200703-21",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
        },
        {
          "name": "oval:org.mitre.oval:def:11185",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11185"
        },
        {
          "name": "24432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24432"
        },
        {
          "name": "24421",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24421"
        },
        {
          "name": "24089",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24089"
        },
        {
          "name": "SUSE-SA:2007:020",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html"
        },
        {
          "name": "2321",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/2321"
        },
        {
          "name": "RHSA-2007:0076",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0076.html"
        },
        {
          "name": "24419",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24419"
        },
        {
          "name": "RHSA-2007:0089",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0089.html"
        },
        {
          "name": "RHSA-2007:0088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0088.html"
        },
        {
          "name": "20070227 rPSA-2007-0043-1 php php-mysql php-pgsql",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/461462/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm"
        },
        {
          "name": "RHSA-2007:0082",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0082.html"
        },
        {
          "name": "22806",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22806"
        },
        {
          "name": "20070201-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php#5.2.1"
        },
        {
          "name": "MDKSA-2007:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:048"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.php-security.org/MOPB/MOPB-11-2007.html"
        },
        {
          "name": "USN-424-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-424-1"
        },
        {
          "name": "RHSA-2007:0081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0081.html"
        },
        {
          "name": "24322",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24322"
        },
        {
          "name": "24236",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24236"
        },
        {
          "name": "ADV-2007-0546",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0546"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0908",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-1264",
              "refsource": "DEBIAN",
              "url": "http://www.us.debian.org/security/2007/dsa-1264"
            },
            {
              "name": "24295",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24295"
            },
            {
              "name": "2007-0009",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2007/0009/"
            },
            {
              "name": "OpenPKG-SA-2007.010",
              "refsource": "OPENPKG",
              "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html"
            },
            {
              "name": "24195",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24195"
            },
            {
              "name": "1017671",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1017671"
            },
            {
              "name": "24606",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24606"
            },
            {
              "name": "24642",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24642"
            },
            {
              "name": "24217",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24217"
            },
            {
              "name": "32766",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/32766"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm"
            },
            {
              "name": "24248",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24248"
            },
            {
              "name": "php-wddx-information-disclosure(32493)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32493"
            },
            {
              "name": "24514",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24514"
            },
            {
              "name": "22496",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/22496"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1088",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1088"
            },
            {
              "name": "24284",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24284"
            },
            {
              "name": "USN-424-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-424-2"
            },
            {
              "name": "http://www.php.net/releases/5_2_1.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/releases/5_2_1.php"
            },
            {
              "name": "GLSA-200703-21",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
            },
            {
              "name": "oval:org.mitre.oval:def:11185",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11185"
            },
            {
              "name": "24432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24432"
            },
            {
              "name": "24421",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24421"
            },
            {
              "name": "24089",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24089"
            },
            {
              "name": "SUSE-SA:2007:020",
              "refsource": "SUSE",
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html"
            },
            {
              "name": "2321",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/2321"
            },
            {
              "name": "RHSA-2007:0076",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0076.html"
            },
            {
              "name": "24419",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24419"
            },
            {
              "name": "RHSA-2007:0089",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0089.html"
            },
            {
              "name": "RHSA-2007:0088",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0088.html"
            },
            {
              "name": "20070227 rPSA-2007-0043-1 php php-mysql php-pgsql",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/461462/100/0/threaded"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm"
            },
            {
              "name": "RHSA-2007:0082",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0082.html"
            },
            {
              "name": "22806",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/22806"
            },
            {
              "name": "20070201-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php#5.2.1",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php#5.2.1"
            },
            {
              "name": "MDKSA-2007:048",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:048"
            },
            {
              "name": "http://www.php-security.org/MOPB/MOPB-11-2007.html",
              "refsource": "MISC",
              "url": "http://www.php-security.org/MOPB/MOPB-11-2007.html"
            },
            {
              "name": "USN-424-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-424-1"
            },
            {
              "name": "RHSA-2007:0081",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0081.html"
            },
            {
              "name": "24322",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24322"
            },
            {
              "name": "24236",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24236"
            },
            {
              "name": "ADV-2007-0546",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/0546"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-0908",
    "datePublished": "2007-02-13T23:00:00",
    "dateReserved": "2007-02-13T00:00:00",
    "dateUpdated": "2024-08-07T12:34:21.323Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2007-1701

Vulnerability from cvelistv5

Published

2007-03-27 01:00

Modified

2024-08-07 13:06

Severity ?

Summary

PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with "_SESSION|s:39:".

References

▼	URL	Tags
	http://www.securityfocus.com/bid/23120	vdb-entry, x_refsource_BID
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11034	vdb-entry, signature, x_refsource_OVAL
	http://www.vupen.com/english/advisories/2007/1991	vdb-entry, x_refsource_VUPEN
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506	vendor-advisory, x_refsource_HP
	https://exchange.xforce.ibmcloud.com/vulnerabilities/33658	vdb-entry, x_refsource_XF
	http://security.gentoo.org/glsa/glsa-200705-19.xml	vendor-advisory, x_refsource_GENTOO
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137	vendor-advisory, x_refsource_HP
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137	vendor-advisory, x_refsource_HP
	http://www.vupen.com/english/advisories/2007/2374	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/25423	third-party-advisory, x_refsource_SECUNIA
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/25850	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/25445	third-party-advisory, x_refsource_SECUNIA
	http://www.php-security.org/MOPB/MOPB-31-2007.html	x_refsource_MISC

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T13:06:26.204Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "23120",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/23120"
          },
          {
            "name": "oval:org.mitre.oval:def:11034",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11034"
          },
          {
            "name": "ADV-2007-1991",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1991"
          },
          {
            "name": "SSRT071423",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01056506"
          },
          {
            "name": "php-sessiondecode-code-execution(33658)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33658"
          },
          {
            "name": "GLSA-200705-19",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200705-19.xml"
          },
          {
            "name": "HPSBTU02232",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01086137"
          },
          {
            "name": "SSRT071429",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01086137"
          },
          {
            "name": "ADV-2007-2374",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2374"
          },
          {
            "name": "25423",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25423"
          },
          {
            "name": "HPSBMA02215",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01056506"
          },
          {
            "name": "25850",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25850"
          },
          {
            "name": "25445",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25445"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.php-security.org/MOPB/MOPB-31-2007.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-03-24T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with \"_SESSION|s:39:\"."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "23120",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/23120"
        },
        {
          "name": "oval:org.mitre.oval:def:11034",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11034"
        },
        {
          "name": "ADV-2007-1991",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/1991"
        },
        {
          "name": "SSRT071423",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01056506"
        },
        {
          "name": "php-sessiondecode-code-execution(33658)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33658"
        },
        {
          "name": "GLSA-200705-19",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200705-19.xml"
        },
        {
          "name": "HPSBTU02232",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01086137"
        },
        {
          "name": "SSRT071429",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01086137"
        },
        {
          "name": "ADV-2007-2374",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2374"
        },
        {
          "name": "25423",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25423"
        },
        {
          "name": "HPSBMA02215",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01056506"
        },
        {
          "name": "25850",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25850"
        },
        {
          "name": "25445",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25445"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.php-security.org/MOPB/MOPB-31-2007.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-1701",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with \"_SESSION|s:39:\"."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "23120",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/23120"
            },
            {
              "name": "oval:org.mitre.oval:def:11034",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11034"
            },
            {
              "name": "ADV-2007-1991",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/1991"
            },
            {
              "name": "SSRT071423",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01056506"
            },
            {
              "name": "php-sessiondecode-code-execution(33658)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33658"
            },
            {
              "name": "GLSA-200705-19",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200705-19.xml"
            },
            {
              "name": "HPSBTU02232",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01086137"
            },
            {
              "name": "SSRT071429",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01086137"
            },
            {
              "name": "ADV-2007-2374",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2374"
            },
            {
              "name": "25423",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25423"
            },
            {
              "name": "HPSBMA02215",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01056506"
            },
            {
              "name": "25850",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25850"
            },
            {
              "name": "25445",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25445"
            },
            {
              "name": "http://www.php-security.org/MOPB/MOPB-31-2007.html",
              "refsource": "MISC",
              "url": "http://www.php-security.org/MOPB/MOPB-31-2007.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-1701",
    "datePublished": "2007-03-27T01:00:00",
    "dateReserved": "2007-03-26T00:00:00",
    "dateUpdated": "2024-08-07T13:06:26.204Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2007-1825

Vulnerability from cvelistv5

Published

2007-04-02 23:00

Modified

2024-08-07 13:13

Severity ?

Summary

Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrary code via a long boundary string in a type.parameters field. NOTE: as of 20070411, it appears that this issue might be subsumed by CVE-2007-0906.3.

References

▼	URL	Tags
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10377	vdb-entry, signature, x_refsource_OVAL
	http://www.php-security.org/MOPB/MOPB-40-2007.html	x_refsource_MISC
	http://www.securityfocus.com/bid/23234	vdb-entry, x_refsource_BID
	https://exchange.xforce.ibmcloud.com/vulnerabilities/33534	vdb-entry, x_refsource_XF

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T13:13:40.564Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:10377",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10377"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.php-security.org/MOPB/MOPB-40-2007.html"
          },
          {
            "name": "23234",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/23234"
          },
          {
            "name": "php-imapmailcompose-bo(33534)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33534"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-03-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrary code via a long boundary string in a type.parameters field. NOTE: as of 20070411, it appears that this issue might be subsumed by CVE-2007-0906.3."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:10377",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10377"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.php-security.org/MOPB/MOPB-40-2007.html"
        },
        {
          "name": "23234",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/23234"
        },
        {
          "name": "php-imapmailcompose-bo(33534)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33534"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-1825",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrary code via a long boundary string in a type.parameters field. NOTE: as of 20070411, it appears that this issue might be subsumed by CVE-2007-0906.3."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:10377",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10377"
            },
            {
              "name": "http://www.php-security.org/MOPB/MOPB-40-2007.html",
              "refsource": "MISC",
              "url": "http://www.php-security.org/MOPB/MOPB-40-2007.html"
            },
            {
              "name": "23234",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/23234"
            },
            {
              "name": "php-imapmailcompose-bo(33534)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33534"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-1825",
    "datePublished": "2007-04-02T23:00:00",
    "dateReserved": "2007-04-02T00:00:00",
    "dateUpdated": "2024-08-07T13:13:40.564Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2007-0909

Vulnerability from cvelistv5

Published

2007-02-13 23:00

Modified

2024-08-07 12:34

Severity ?

Summary

Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.

References

▼	URL	Tags
	http://www.us.debian.org/security/2007/dsa-1264	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/24295	third-party-advisory, x_refsource_SECUNIA
	http://www.trustix.org/errata/2007/0009/	vendor-advisory, x_refsource_TRUSTIX
	http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html	vendor-advisory, x_refsource_OPENPKG
	http://secunia.com/advisories/24195	third-party-advisory, x_refsource_SECUNIA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9722	vdb-entry, signature, x_refsource_OVAL
	http://www.securitytracker.com/id?1017671	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/24606	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24642	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24217	third-party-advisory, x_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm	x_refsource_CONFIRM
	http://secunia.com/advisories/24248	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24514	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/22496	vdb-entry, x_refsource_BID
	https://issues.rpath.com/browse/RPL-1088	x_refsource_CONFIRM
	http://secunia.com/advisories/24284	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-424-2	vendor-advisory, x_refsource_UBUNTU
	http://www.php.net/releases/5_2_1.php	x_refsource_CONFIRM
	http://security.gentoo.org/glsa/glsa-200703-21.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/24432	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24421	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24089	third-party-advisory, x_refsource_SECUNIA
	http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2007-0076.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/24419	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2007-0089.html	vendor-advisory, x_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2007-0088.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/archive/1/461462/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2007-0082.html	vendor-advisory, x_refsource_REDHAT
	http://osvdb.org/32764	vdb-entry, x_refsource_OSVDB
	ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc	vendor-advisory, x_refsource_SGI
	http://www.php.net/ChangeLog-5.php#5.2.1	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDKSA-2007:048	vendor-advisory, x_refsource_MANDRIVA
	http://osvdb.org/32765	vdb-entry, x_refsource_OSVDB
	http://www.ubuntu.com/usn/usn-424-1	vendor-advisory, x_refsource_UBUNTU
	http://www.redhat.com/support/errata/RHSA-2007-0081.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/24322	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24236	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/0546	vdb-entry, x_refsource_VUPEN

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:34:21.303Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.us.debian.org/security/2007/dsa-1264"
          },
          {
            "name": "24295",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24295"
          },
          {
            "name": "2007-0009",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2007/0009/"
          },
          {
            "name": "OpenPKG-SA-2007.010",
            "tags": [
              "vendor-advisory",
              "x_refsource_OPENPKG",
              "x_transferred"
            ],
            "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html"
          },
          {
            "name": "24195",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24195"
          },
          {
            "name": "oval:org.mitre.oval:def:9722",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9722"
          },
          {
            "name": "1017671",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1017671"
          },
          {
            "name": "24606",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24606"
          },
          {
            "name": "24642",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24642"
          },
          {
            "name": "24217",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24217"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm"
          },
          {
            "name": "24248",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24248"
          },
          {
            "name": "24514",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24514"
          },
          {
            "name": "22496",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22496"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1088"
          },
          {
            "name": "24284",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24284"
          },
          {
            "name": "USN-424-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-424-2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/releases/5_2_1.php"
          },
          {
            "name": "GLSA-200703-21",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
          },
          {
            "name": "24432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24432"
          },
          {
            "name": "24421",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24421"
          },
          {
            "name": "24089",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24089"
          },
          {
            "name": "SUSE-SA:2007:020",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html"
          },
          {
            "name": "RHSA-2007:0076",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0076.html"
          },
          {
            "name": "24419",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24419"
          },
          {
            "name": "RHSA-2007:0089",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0089.html"
          },
          {
            "name": "RHSA-2007:0088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0088.html"
          },
          {
            "name": "20070227 rPSA-2007-0043-1 php php-mysql php-pgsql",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/461462/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm"
          },
          {
            "name": "RHSA-2007:0082",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0082.html"
          },
          {
            "name": "32764",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/32764"
          },
          {
            "name": "20070201-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php#5.2.1"
          },
          {
            "name": "MDKSA-2007:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:048"
          },
          {
            "name": "32765",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/32765"
          },
          {
            "name": "USN-424-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-424-1"
          },
          {
            "name": "RHSA-2007:0081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0081.html"
          },
          {
            "name": "24322",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24322"
          },
          {
            "name": "24236",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24236"
          },
          {
            "name": "ADV-2007-0546",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0546"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-02-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-16T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.us.debian.org/security/2007/dsa-1264"
        },
        {
          "name": "24295",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24295"
        },
        {
          "name": "2007-0009",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2007/0009/"
        },
        {
          "name": "OpenPKG-SA-2007.010",
          "tags": [
            "vendor-advisory",
            "x_refsource_OPENPKG"
          ],
          "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html"
        },
        {
          "name": "24195",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24195"
        },
        {
          "name": "oval:org.mitre.oval:def:9722",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9722"
        },
        {
          "name": "1017671",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1017671"
        },
        {
          "name": "24606",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24606"
        },
        {
          "name": "24642",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24642"
        },
        {
          "name": "24217",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24217"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm"
        },
        {
          "name": "24248",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24248"
        },
        {
          "name": "24514",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24514"
        },
        {
          "name": "22496",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22496"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1088"
        },
        {
          "name": "24284",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24284"
        },
        {
          "name": "USN-424-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-424-2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/releases/5_2_1.php"
        },
        {
          "name": "GLSA-200703-21",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
        },
        {
          "name": "24432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24432"
        },
        {
          "name": "24421",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24421"
        },
        {
          "name": "24089",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24089"
        },
        {
          "name": "SUSE-SA:2007:020",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html"
        },
        {
          "name": "RHSA-2007:0076",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0076.html"
        },
        {
          "name": "24419",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24419"
        },
        {
          "name": "RHSA-2007:0089",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0089.html"
        },
        {
          "name": "RHSA-2007:0088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0088.html"
        },
        {
          "name": "20070227 rPSA-2007-0043-1 php php-mysql php-pgsql",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/461462/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm"
        },
        {
          "name": "RHSA-2007:0082",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0082.html"
        },
        {
          "name": "32764",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/32764"
        },
        {
          "name": "20070201-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php#5.2.1"
        },
        {
          "name": "MDKSA-2007:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:048"
        },
        {
          "name": "32765",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/32765"
        },
        {
          "name": "USN-424-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-424-1"
        },
        {
          "name": "RHSA-2007:0081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0081.html"
        },
        {
          "name": "24322",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24322"
        },
        {
          "name": "24236",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24236"
        },
        {
          "name": "ADV-2007-0546",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0546"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0909",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-1264",
              "refsource": "DEBIAN",
              "url": "http://www.us.debian.org/security/2007/dsa-1264"
            },
            {
              "name": "24295",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24295"
            },
            {
              "name": "2007-0009",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2007/0009/"
            },
            {
              "name": "OpenPKG-SA-2007.010",
              "refsource": "OPENPKG",
              "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html"
            },
            {
              "name": "24195",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24195"
            },
            {
              "name": "oval:org.mitre.oval:def:9722",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9722"
            },
            {
              "name": "1017671",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1017671"
            },
            {
              "name": "24606",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24606"
            },
            {
              "name": "24642",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24642"
            },
            {
              "name": "24217",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24217"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm"
            },
            {
              "name": "24248",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24248"
            },
            {
              "name": "24514",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24514"
            },
            {
              "name": "22496",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/22496"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1088",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1088"
            },
            {
              "name": "24284",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24284"
            },
            {
              "name": "USN-424-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-424-2"
            },
            {
              "name": "http://www.php.net/releases/5_2_1.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/releases/5_2_1.php"
            },
            {
              "name": "GLSA-200703-21",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
            },
            {
              "name": "24432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24432"
            },
            {
              "name": "24421",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24421"
            },
            {
              "name": "24089",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24089"
            },
            {
              "name": "SUSE-SA:2007:020",
              "refsource": "SUSE",
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html"
            },
            {
              "name": "RHSA-2007:0076",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0076.html"
            },
            {
              "name": "24419",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24419"
            },
            {
              "name": "RHSA-2007:0089",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0089.html"
            },
            {
              "name": "RHSA-2007:0088",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0088.html"
            },
            {
              "name": "20070227 rPSA-2007-0043-1 php php-mysql php-pgsql",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/461462/100/0/threaded"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm"
            },
            {
              "name": "RHSA-2007:0082",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0082.html"
            },
            {
              "name": "32764",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/32764"
            },
            {
              "name": "20070201-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php#5.2.1",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php#5.2.1"
            },
            {
              "name": "MDKSA-2007:048",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:048"
            },
            {
              "name": "32765",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/32765"
            },
            {
              "name": "USN-424-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-424-1"
            },
            {
              "name": "RHSA-2007:0081",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0081.html"
            },
            {
              "name": "24322",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24322"
            },
            {
              "name": "24236",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24236"
            },
            {
              "name": "ADV-2007-0546",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/0546"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-0909",
    "datePublished": "2007-02-13T23:00:00",
    "dateReserved": "2007-02-13T00:00:00",
    "dateUpdated": "2024-08-07T12:34:21.303Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2007-1380

Vulnerability from cvelistv5

Published

2007-03-10 00:00

Modified

2024-08-07 12:50

Severity ?

Summary

The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context-dependent attackers to obtain sensitive information (memory contents) via a serialized variable entry with a large length value, which triggers a buffer over-read.

References

▼	URL	Tags
	http://www.vupen.com/english/advisories/2007/1991	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/25056	third-party-advisory, x_refsource_SECUNIA
	http://www.php-security.org/MOPB/MOPB-10-2007.html	x_refsource_MISC
	http://www.debian.org/security/2007/dsa-1283	vendor-advisory, x_refsource_DEBIAN
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/24606	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24514	third-party-advisory, x_refsource_SECUNIA
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137	vendor-advisory, x_refsource_HP
	http://security.gentoo.org/glsa/glsa-200703-21.xml	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/22805	vdb-entry, x_refsource_BID
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/25062	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/2374	vdb-entry, x_refsource_VUPEN
	http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/25423	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-455-1	vendor-advisory, x_refsource_UBUNTU
	https://www.exploit-db.com/exploits/3413	exploit, x_refsource_EXPLOIT-DB
	http://www.debian.org/security/2007/dsa-1282	vendor-advisory, x_refsource_DEBIAN
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10792	vdb-entry, signature, x_refsource_OVAL
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/25850	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/25057	third-party-advisory, x_refsource_SECUNIA
	http://www.novell.com/linux/security/advisories/2007_32_php.html	vendor-advisory, x_refsource_SUSE
	http://secunia.com/advisories/25025	third-party-advisory, x_refsource_SECUNIA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:50:35.258Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2007-1991",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1991"
          },
          {
            "name": "25056",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25056"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.php-security.org/MOPB/MOPB-10-2007.html"
          },
          {
            "name": "DSA-1283",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1283"
          },
          {
            "name": "SSRT071423",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01056506"
          },
          {
            "name": "24606",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24606"
          },
          {
            "name": "24514",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24514"
          },
          {
            "name": "HPSBTU02232",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01086137"
          },
          {
            "name": "GLSA-200703-21",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
          },
          {
            "name": "22805",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22805"
          },
          {
            "name": "SSRT071429",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01086137"
          },
          {
            "name": "25062",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25062"
          },
          {
            "name": "ADV-2007-2374",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2374"
          },
          {
            "name": "SUSE-SA:2007:020",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html"
          },
          {
            "name": "25423",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25423"
          },
          {
            "name": "USN-455-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-455-1"
          },
          {
            "name": "3413",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/3413"
          },
          {
            "name": "DSA-1282",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1282"
          },
          {
            "name": "oval:org.mitre.oval:def:10792",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10792"
          },
          {
            "name": "HPSBMA02215",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01056506"
          },
          {
            "name": "25850",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25850"
          },
          {
            "name": "25057",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25057"
          },
          {
            "name": "SUSE-SA:2007:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_32_php.html"
          },
          {
            "name": "25025",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25025"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-03-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context-dependent attackers to obtain sensitive information (memory contents) via a serialized variable entry with a large length value, which triggers a buffer over-read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2007-1991",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/1991"
        },
        {
          "name": "25056",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25056"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.php-security.org/MOPB/MOPB-10-2007.html"
        },
        {
          "name": "DSA-1283",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1283"
        },
        {
          "name": "SSRT071423",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01056506"
        },
        {
          "name": "24606",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24606"
        },
        {
          "name": "24514",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24514"
        },
        {
          "name": "HPSBTU02232",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01086137"
        },
        {
          "name": "GLSA-200703-21",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
        },
        {
          "name": "22805",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22805"
        },
        {
          "name": "SSRT071429",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01086137"
        },
        {
          "name": "25062",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25062"
        },
        {
          "name": "ADV-2007-2374",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2374"
        },
        {
          "name": "SUSE-SA:2007:020",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html"
        },
        {
          "name": "25423",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25423"
        },
        {
          "name": "USN-455-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-455-1"
        },
        {
          "name": "3413",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/3413"
        },
        {
          "name": "DSA-1282",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1282"
        },
        {
          "name": "oval:org.mitre.oval:def:10792",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10792"
        },
        {
          "name": "HPSBMA02215",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01056506"
        },
        {
          "name": "25850",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25850"
        },
        {
          "name": "25057",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25057"
        },
        {
          "name": "SUSE-SA:2007:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_32_php.html"
        },
        {
          "name": "25025",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25025"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-1380",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context-dependent attackers to obtain sensitive information (memory contents) via a serialized variable entry with a large length value, which triggers a buffer over-read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2007-1991",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/1991"
            },
            {
              "name": "25056",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25056"
            },
            {
              "name": "http://www.php-security.org/MOPB/MOPB-10-2007.html",
              "refsource": "MISC",
              "url": "http://www.php-security.org/MOPB/MOPB-10-2007.html"
            },
            {
              "name": "DSA-1283",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1283"
            },
            {
              "name": "SSRT071423",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01056506"
            },
            {
              "name": "24606",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24606"
            },
            {
              "name": "24514",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24514"
            },
            {
              "name": "HPSBTU02232",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01086137"
            },
            {
              "name": "GLSA-200703-21",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
            },
            {
              "name": "22805",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/22805"
            },
            {
              "name": "SSRT071429",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01086137"
            },
            {
              "name": "25062",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25062"
            },
            {
              "name": "ADV-2007-2374",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2374"
            },
            {
              "name": "SUSE-SA:2007:020",
              "refsource": "SUSE",
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html"
            },
            {
              "name": "25423",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25423"
            },
            {
              "name": "USN-455-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-455-1"
            },
            {
              "name": "3413",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/3413"
            },
            {
              "name": "DSA-1282",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1282"
            },
            {
              "name": "oval:org.mitre.oval:def:10792",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10792"
            },
            {
              "name": "HPSBMA02215",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01056506"
            },
            {
              "name": "25850",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25850"
            },
            {
              "name": "25057",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25057"
            },
            {
              "name": "SUSE-SA:2007:032",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_32_php.html"
            },
            {
              "name": "25025",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25025"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-1380",
    "datePublished": "2007-03-10T00:00:00",
    "dateReserved": "2007-03-09T00:00:00",
    "dateUpdated": "2024-08-07T12:50:35.258Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2007-0906

Vulnerability from cvelistv5

Published

2007-02-13 23:00

Modified

2024-08-07 12:34

Severity ?

Summary

Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the (1) session, (2) zip, (3) imap, and (4) sqlite extensions; (5) stream filters; and the (6) str_replace, (7) mail, (8) ibase_delete_user, (9) ibase_add_user, and (10) ibase_modify_user functions. NOTE: vector 6 might actually be an integer overflow (CVE-2007-1885). NOTE: as of 20070411, vector (3) might involve the imap_mail_compose function (CVE-2007-1825).

References

▼	URL	Tags
	http://www.us.debian.org/security/2007/dsa-1264	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/24295	third-party-advisory, x_refsource_SECUNIA
	http://www.trustix.org/errata/2007/0009/	vendor-advisory, x_refsource_TRUSTIX
	http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html	vendor-advisory, x_refsource_OPENPKG
	http://secunia.com/advisories/24195	third-party-advisory, x_refsource_SECUNIA
	http://osvdb.org/34710	vdb-entry, x_refsource_OSVDB
	http://www.securitytracker.com/id?1017671	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/24606	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/26048	third-party-advisory, x_refsource_SECUNIA
	http://osvdb.org/34708	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/24642	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/466166/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://secunia.com/advisories/24217	third-party-advisory, x_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm	x_refsource_CONFIRM
	http://osvdb.org/34706	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/24248	third-party-advisory, x_refsource_SECUNIA
	http://osvdb.org/34714	vdb-entry, x_refsource_OSVDB
	http://secunia.com/advisories/24514	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/22496	vdb-entry, x_refsource_BID
	https://issues.rpath.com/browse/RPL-1088	x_refsource_CONFIRM
	http://secunia.com/advisories/24284	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-424-2	vendor-advisory, x_refsource_UBUNTU
	http://osvdb.org/34709	vdb-entry, x_refsource_OSVDB
	http://www.php.net/releases/5_2_1.php	x_refsource_CONFIRM
	http://osvdb.org/34712	vdb-entry, x_refsource_OSVDB
	http://security.gentoo.org/glsa/glsa-200703-21.xml	vendor-advisory, x_refsource_GENTOO
	http://secunia.com/advisories/24432	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24421	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24089	third-party-advisory, x_refsource_SECUNIA
	http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2007-0076.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/24419	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24945	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2007-0089.html	vendor-advisory, x_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2007-0088.html	vendor-advisory, x_refsource_REDHAT
	https://issues.rpath.com/browse/RPL-1268	x_refsource_CONFIRM
	http://osvdb.org/34707	vdb-entry, x_refsource_OSVDB
	http://osvdb.org/34713	vdb-entry, x_refsource_OSVDB
	http://www.securityfocus.com/archive/1/461462/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2007-0082.html	vendor-advisory, x_refsource_REDHAT
	http://osvdb.org/34711	vdb-entry, x_refsource_OSVDB
	ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc	vendor-advisory, x_refsource_SGI
	http://osvdb.org/34715	vdb-entry, x_refsource_OSVDB
	http://www.osvdb.org/32776	vdb-entry, x_refsource_OSVDB
	http://www.php.net/ChangeLog-5.php#5.2.1	x_refsource_CONFIRM
	http://www.mandriva.com/security/advisories?name=MDKSA-2007:048	vendor-advisory, x_refsource_MANDRIVA
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8992	vdb-entry, signature, x_refsource_OVAL
	http://www.ubuntu.com/usn/usn-424-1	vendor-advisory, x_refsource_UBUNTU
	http://www.redhat.com/support/errata/RHSA-2007-0081.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/24322	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24236	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/0546	vdb-entry, x_refsource_VUPEN
	http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html	vendor-advisory, x_refsource_SUSE

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:34:21.285Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.us.debian.org/security/2007/dsa-1264"
          },
          {
            "name": "24295",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24295"
          },
          {
            "name": "2007-0009",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2007/0009/"
          },
          {
            "name": "OpenPKG-SA-2007.010",
            "tags": [
              "vendor-advisory",
              "x_refsource_OPENPKG",
              "x_transferred"
            ],
            "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html"
          },
          {
            "name": "24195",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24195"
          },
          {
            "name": "34710",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/34710"
          },
          {
            "name": "1017671",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1017671"
          },
          {
            "name": "24606",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24606"
          },
          {
            "name": "26048",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26048"
          },
          {
            "name": "34708",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/34708"
          },
          {
            "name": "24642",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24642"
          },
          {
            "name": "20070418 rPSA-2007-0073-1 php php-mysql php-pgsql",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/466166/100/0/threaded"
          },
          {
            "name": "24217",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24217"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm"
          },
          {
            "name": "34706",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/34706"
          },
          {
            "name": "24248",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24248"
          },
          {
            "name": "34714",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/34714"
          },
          {
            "name": "24514",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24514"
          },
          {
            "name": "22496",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22496"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1088"
          },
          {
            "name": "24284",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24284"
          },
          {
            "name": "USN-424-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-424-2"
          },
          {
            "name": "34709",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/34709"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/releases/5_2_1.php"
          },
          {
            "name": "34712",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/34712"
          },
          {
            "name": "GLSA-200703-21",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
          },
          {
            "name": "24432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24432"
          },
          {
            "name": "24421",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24421"
          },
          {
            "name": "24089",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24089"
          },
          {
            "name": "SUSE-SA:2007:020",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html"
          },
          {
            "name": "RHSA-2007:0076",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0076.html"
          },
          {
            "name": "24419",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24419"
          },
          {
            "name": "24945",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24945"
          },
          {
            "name": "RHSA-2007:0089",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0089.html"
          },
          {
            "name": "RHSA-2007:0088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0088.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1268"
          },
          {
            "name": "34707",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/34707"
          },
          {
            "name": "34713",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/34713"
          },
          {
            "name": "20070227 rPSA-2007-0043-1 php php-mysql php-pgsql",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/461462/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm"
          },
          {
            "name": "RHSA-2007:0082",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0082.html"
          },
          {
            "name": "34711",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/34711"
          },
          {
            "name": "20070201-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc"
          },
          {
            "name": "34715",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/34715"
          },
          {
            "name": "32776",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/32776"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php#5.2.1"
          },
          {
            "name": "MDKSA-2007:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:048"
          },
          {
            "name": "oval:org.mitre.oval:def:8992",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8992"
          },
          {
            "name": "USN-424-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-424-1"
          },
          {
            "name": "RHSA-2007:0081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0081.html"
          },
          {
            "name": "24322",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24322"
          },
          {
            "name": "24236",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24236"
          },
          {
            "name": "ADV-2007-0546",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0546"
          },
          {
            "name": "SUSE-SA:2007:044",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-02-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the (1) session, (2) zip, (3) imap, and (4) sqlite extensions; (5) stream filters; and the (6) str_replace, (7) mail, (8) ibase_delete_user, (9) ibase_add_user, and (10) ibase_modify_user functions.  NOTE: vector 6 might actually be an integer overflow (CVE-2007-1885).  NOTE: as of 20070411, vector (3) might involve the imap_mail_compose function (CVE-2007-1825)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-16T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.us.debian.org/security/2007/dsa-1264"
        },
        {
          "name": "24295",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24295"
        },
        {
          "name": "2007-0009",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2007/0009/"
        },
        {
          "name": "OpenPKG-SA-2007.010",
          "tags": [
            "vendor-advisory",
            "x_refsource_OPENPKG"
          ],
          "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html"
        },
        {
          "name": "24195",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24195"
        },
        {
          "name": "34710",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/34710"
        },
        {
          "name": "1017671",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1017671"
        },
        {
          "name": "24606",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24606"
        },
        {
          "name": "26048",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26048"
        },
        {
          "name": "34708",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/34708"
        },
        {
          "name": "24642",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24642"
        },
        {
          "name": "20070418 rPSA-2007-0073-1 php php-mysql php-pgsql",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/466166/100/0/threaded"
        },
        {
          "name": "24217",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24217"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm"
        },
        {
          "name": "34706",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/34706"
        },
        {
          "name": "24248",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24248"
        },
        {
          "name": "34714",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/34714"
        },
        {
          "name": "24514",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24514"
        },
        {
          "name": "22496",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22496"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1088"
        },
        {
          "name": "24284",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24284"
        },
        {
          "name": "USN-424-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-424-2"
        },
        {
          "name": "34709",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/34709"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/releases/5_2_1.php"
        },
        {
          "name": "34712",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/34712"
        },
        {
          "name": "GLSA-200703-21",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
        },
        {
          "name": "24432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24432"
        },
        {
          "name": "24421",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24421"
        },
        {
          "name": "24089",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24089"
        },
        {
          "name": "SUSE-SA:2007:020",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html"
        },
        {
          "name": "RHSA-2007:0076",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0076.html"
        },
        {
          "name": "24419",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24419"
        },
        {
          "name": "24945",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24945"
        },
        {
          "name": "RHSA-2007:0089",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0089.html"
        },
        {
          "name": "RHSA-2007:0088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0088.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1268"
        },
        {
          "name": "34707",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/34707"
        },
        {
          "name": "34713",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/34713"
        },
        {
          "name": "20070227 rPSA-2007-0043-1 php php-mysql php-pgsql",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/461462/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm"
        },
        {
          "name": "RHSA-2007:0082",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0082.html"
        },
        {
          "name": "34711",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/34711"
        },
        {
          "name": "20070201-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc"
        },
        {
          "name": "34715",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/34715"
        },
        {
          "name": "32776",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/32776"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php#5.2.1"
        },
        {
          "name": "MDKSA-2007:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:048"
        },
        {
          "name": "oval:org.mitre.oval:def:8992",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8992"
        },
        {
          "name": "USN-424-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-424-1"
        },
        {
          "name": "RHSA-2007:0081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0081.html"
        },
        {
          "name": "24322",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24322"
        },
        {
          "name": "24236",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24236"
        },
        {
          "name": "ADV-2007-0546",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0546"
        },
        {
          "name": "SUSE-SA:2007:044",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0906",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the (1) session, (2) zip, (3) imap, and (4) sqlite extensions; (5) stream filters; and the (6) str_replace, (7) mail, (8) ibase_delete_user, (9) ibase_add_user, and (10) ibase_modify_user functions.  NOTE: vector 6 might actually be an integer overflow (CVE-2007-1885).  NOTE: as of 20070411, vector (3) might involve the imap_mail_compose function (CVE-2007-1825)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-1264",
              "refsource": "DEBIAN",
              "url": "http://www.us.debian.org/security/2007/dsa-1264"
            },
            {
              "name": "24295",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24295"
            },
            {
              "name": "2007-0009",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2007/0009/"
            },
            {
              "name": "OpenPKG-SA-2007.010",
              "refsource": "OPENPKG",
              "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html"
            },
            {
              "name": "24195",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24195"
            },
            {
              "name": "34710",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/34710"
            },
            {
              "name": "1017671",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1017671"
            },
            {
              "name": "24606",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24606"
            },
            {
              "name": "26048",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26048"
            },
            {
              "name": "34708",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/34708"
            },
            {
              "name": "24642",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24642"
            },
            {
              "name": "20070418 rPSA-2007-0073-1 php php-mysql php-pgsql",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/466166/100/0/threaded"
            },
            {
              "name": "24217",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24217"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm"
            },
            {
              "name": "34706",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/34706"
            },
            {
              "name": "24248",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24248"
            },
            {
              "name": "34714",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/34714"
            },
            {
              "name": "24514",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24514"
            },
            {
              "name": "22496",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/22496"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1088",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1088"
            },
            {
              "name": "24284",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24284"
            },
            {
              "name": "USN-424-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-424-2"
            },
            {
              "name": "34709",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/34709"
            },
            {
              "name": "http://www.php.net/releases/5_2_1.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/releases/5_2_1.php"
            },
            {
              "name": "34712",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/34712"
            },
            {
              "name": "GLSA-200703-21",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
            },
            {
              "name": "24432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24432"
            },
            {
              "name": "24421",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24421"
            },
            {
              "name": "24089",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24089"
            },
            {
              "name": "SUSE-SA:2007:020",
              "refsource": "SUSE",
              "url": "http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html"
            },
            {
              "name": "RHSA-2007:0076",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0076.html"
            },
            {
              "name": "24419",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24419"
            },
            {
              "name": "24945",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24945"
            },
            {
              "name": "RHSA-2007:0089",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0089.html"
            },
            {
              "name": "RHSA-2007:0088",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0088.html"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1268",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1268"
            },
            {
              "name": "34707",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/34707"
            },
            {
              "name": "34713",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/34713"
            },
            {
              "name": "20070227 rPSA-2007-0043-1 php php-mysql php-pgsql",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/461462/100/0/threaded"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm"
            },
            {
              "name": "RHSA-2007:0082",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0082.html"
            },
            {
              "name": "34711",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/34711"
            },
            {
              "name": "20070201-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc"
            },
            {
              "name": "34715",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/34715"
            },
            {
              "name": "32776",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/32776"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php#5.2.1",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php#5.2.1"
            },
            {
              "name": "MDKSA-2007:048",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:048"
            },
            {
              "name": "oval:org.mitre.oval:def:8992",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8992"
            },
            {
              "name": "USN-424-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-424-1"
            },
            {
              "name": "RHSA-2007:0081",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0081.html"
            },
            {
              "name": "24322",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24322"
            },
            {
              "name": "24236",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24236"
            },
            {
              "name": "ADV-2007-0546",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/0546"
            },
            {
              "name": "SUSE-SA:2007:044",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-0906",
    "datePublished": "2007-02-13T23:00:00",
    "dateReserved": "2007-02-13T00:00:00",
    "dateUpdated": "2024-08-07T12:34:21.285Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2007-0988

Vulnerability from cvelistv5

Published

2007-02-20 17:00

Modified

2024-08-07 12:43

Severity ?

Summary

The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument.

References

▼	URL	Tags
	http://www.us.debian.org/security/2007/dsa-1264	vendor-advisory, x_refsource_DEBIAN
	http://secunia.com/advisories/24295	third-party-advisory, x_refsource_SECUNIA
	http://www.trustix.org/errata/2007/0009/	vendor-advisory, x_refsource_TRUSTIX
	http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html	vendor-advisory, x_refsource_OPENPKG
	http://secunia.com/advisories/24195	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/1991	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/25056	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1017671	vdb-entry, x_refsource_SECTRACK
	http://www.php-security.org/MOPB/MOPB-05-2007.html	x_refsource_MISC
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506	vendor-advisory, x_refsource_HP
	http://www.php.net/releases/5_2_1.php	x_refsource_MISC
	http://secunia.com/advisories/24606	third-party-advisory, x_refsource_SECUNIA
	http://securityreason.com/securityalert/2315	third-party-advisory, x_refsource_SREASON
	http://secunia.com/advisories/24642	third-party-advisory, x_refsource_SECUNIA
	https://exchange.xforce.ibmcloud.com/vulnerabilities/32709	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/24217	third-party-advisory, x_refsource_SECUNIA
	http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm	x_refsource_CONFIRM
	http://secunia.com/advisories/24248	third-party-advisory, x_refsource_SECUNIA
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137	vendor-advisory, x_refsource_HP
	https://issues.rpath.com/browse/RPL-1088	x_refsource_CONFIRM
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11092	vdb-entry, signature, x_refsource_OVAL
	http://secunia.com/advisories/24284	third-party-advisory, x_refsource_SECUNIA
	http://www.ubuntu.com/usn/usn-424-2	vendor-advisory, x_refsource_UBUNTU
	http://osvdb.org/32762	vdb-entry, x_refsource_OSVDB
	http://security.gentoo.org/glsa/glsa-200703-21.xml	vendor-advisory, x_refsource_GENTOO
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137	vendor-advisory, x_refsource_HP
	http://secunia.com/advisories/24432	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24421	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/2374	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/25423	third-party-advisory, x_refsource_SECUNIA
	http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=228858	x_refsource_MISC
	http://www.redhat.com/support/errata/RHSA-2007-0076.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/24419	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2007-0089.html	vendor-advisory, x_refsource_REDHAT
	http://www.redhat.com/support/errata/RHSA-2007-0088.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/archive/1/461462/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm	x_refsource_CONFIRM
	http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506	vendor-advisory, x_refsource_HP
	http://www.redhat.com/support/errata/RHSA-2007-0082.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/25850	third-party-advisory, x_refsource_SECUNIA
	ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc	vendor-advisory, x_refsource_SGI
	http://www.mandriva.com/security/advisories?name=MDKSA-2007:048	vendor-advisory, x_refsource_MANDRIVA
	http://www.novell.com/linux/security/advisories/2007_32_php.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/usn-424-1	vendor-advisory, x_refsource_UBUNTU
	http://www.redhat.com/support/errata/RHSA-2007-0081.html	vendor-advisory, x_refsource_REDHAT
	http://secunia.com/advisories/24322	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/24236	third-party-advisory, x_refsource_SECUNIA

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:43:22.216Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "DSA-1264",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.us.debian.org/security/2007/dsa-1264"
          },
          {
            "name": "24295",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24295"
          },
          {
            "name": "2007-0009",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2007/0009/"
          },
          {
            "name": "OpenPKG-SA-2007.010",
            "tags": [
              "vendor-advisory",
              "x_refsource_OPENPKG",
              "x_transferred"
            ],
            "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html"
          },
          {
            "name": "24195",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24195"
          },
          {
            "name": "ADV-2007-1991",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/1991"
          },
          {
            "name": "25056",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25056"
          },
          {
            "name": "1017671",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1017671"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.php-security.org/MOPB/MOPB-05-2007.html"
          },
          {
            "name": "SSRT071423",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01056506"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.php.net/releases/5_2_1.php"
          },
          {
            "name": "24606",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24606"
          },
          {
            "name": "2315",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/2315"
          },
          {
            "name": "24642",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24642"
          },
          {
            "name": "php-zendhashinit-dos(32709)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32709"
          },
          {
            "name": "24217",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24217"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm"
          },
          {
            "name": "24248",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24248"
          },
          {
            "name": "HPSBTU02232",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01086137"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1088"
          },
          {
            "name": "oval:org.mitre.oval:def:11092",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11092"
          },
          {
            "name": "24284",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24284"
          },
          {
            "name": "USN-424-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-424-2"
          },
          {
            "name": "32762",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/32762"
          },
          {
            "name": "GLSA-200703-21",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
          },
          {
            "name": "SSRT071429",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01086137"
          },
          {
            "name": "24432",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24432"
          },
          {
            "name": "24421",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24421"
          },
          {
            "name": "ADV-2007-2374",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2374"
          },
          {
            "name": "25423",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25423"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=228858"
          },
          {
            "name": "RHSA-2007:0076",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0076.html"
          },
          {
            "name": "24419",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24419"
          },
          {
            "name": "RHSA-2007:0089",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2007-0089.html"
          },
          {
            "name": "RHSA-2007:0088",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0088.html"
          },
          {
            "name": "20070227 rPSA-2007-0043-1 php php-mysql php-pgsql",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/461462/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm"
          },
          {
            "name": "HPSBMA02215",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01056506"
          },
          {
            "name": "RHSA-2007:0082",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0082.html"
          },
          {
            "name": "25850",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25850"
          },
          {
            "name": "20070201-01-P",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc"
          },
          {
            "name": "MDKSA-2007:048",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:048"
          },
          {
            "name": "SUSE-SA:2007:032",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_32_php.html"
          },
          {
            "name": "USN-424-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-424-1"
          },
          {
            "name": "RHSA-2007:0081",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0081.html"
          },
          {
            "name": "24322",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24322"
          },
          {
            "name": "24236",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24236"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-02-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an \"a:2147483649:{\" argument."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-16T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "DSA-1264",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.us.debian.org/security/2007/dsa-1264"
        },
        {
          "name": "24295",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24295"
        },
        {
          "name": "2007-0009",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2007/0009/"
        },
        {
          "name": "OpenPKG-SA-2007.010",
          "tags": [
            "vendor-advisory",
            "x_refsource_OPENPKG"
          ],
          "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html"
        },
        {
          "name": "24195",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24195"
        },
        {
          "name": "ADV-2007-1991",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/1991"
        },
        {
          "name": "25056",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25056"
        },
        {
          "name": "1017671",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1017671"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.php-security.org/MOPB/MOPB-05-2007.html"
        },
        {
          "name": "SSRT071423",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01056506"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.php.net/releases/5_2_1.php"
        },
        {
          "name": "24606",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24606"
        },
        {
          "name": "2315",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/2315"
        },
        {
          "name": "24642",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24642"
        },
        {
          "name": "php-zendhashinit-dos(32709)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32709"
        },
        {
          "name": "24217",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24217"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm"
        },
        {
          "name": "24248",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24248"
        },
        {
          "name": "HPSBTU02232",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01086137"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1088"
        },
        {
          "name": "oval:org.mitre.oval:def:11092",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11092"
        },
        {
          "name": "24284",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24284"
        },
        {
          "name": "USN-424-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-424-2"
        },
        {
          "name": "32762",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/32762"
        },
        {
          "name": "GLSA-200703-21",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
        },
        {
          "name": "SSRT071429",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01086137"
        },
        {
          "name": "24432",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24432"
        },
        {
          "name": "24421",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24421"
        },
        {
          "name": "ADV-2007-2374",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2374"
        },
        {
          "name": "25423",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25423"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=228858"
        },
        {
          "name": "RHSA-2007:0076",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0076.html"
        },
        {
          "name": "24419",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24419"
        },
        {
          "name": "RHSA-2007:0089",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2007-0089.html"
        },
        {
          "name": "RHSA-2007:0088",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0088.html"
        },
        {
          "name": "20070227 rPSA-2007-0043-1 php php-mysql php-pgsql",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/461462/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm"
        },
        {
          "name": "HPSBMA02215",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01056506"
        },
        {
          "name": "RHSA-2007:0082",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0082.html"
        },
        {
          "name": "25850",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25850"
        },
        {
          "name": "20070201-01-P",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc"
        },
        {
          "name": "MDKSA-2007:048",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:048"
        },
        {
          "name": "SUSE-SA:2007:032",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_32_php.html"
        },
        {
          "name": "USN-424-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-424-1"
        },
        {
          "name": "RHSA-2007:0081",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0081.html"
        },
        {
          "name": "24322",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24322"
        },
        {
          "name": "24236",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24236"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0988",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an \"a:2147483649:{\" argument."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "DSA-1264",
              "refsource": "DEBIAN",
              "url": "http://www.us.debian.org/security/2007/dsa-1264"
            },
            {
              "name": "24295",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24295"
            },
            {
              "name": "2007-0009",
              "refsource": "TRUSTIX",
              "url": "http://www.trustix.org/errata/2007/0009/"
            },
            {
              "name": "OpenPKG-SA-2007.010",
              "refsource": "OPENPKG",
              "url": "http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html"
            },
            {
              "name": "24195",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24195"
            },
            {
              "name": "ADV-2007-1991",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/1991"
            },
            {
              "name": "25056",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25056"
            },
            {
              "name": "1017671",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1017671"
            },
            {
              "name": "http://www.php-security.org/MOPB/MOPB-05-2007.html",
              "refsource": "MISC",
              "url": "http://www.php-security.org/MOPB/MOPB-05-2007.html"
            },
            {
              "name": "SSRT071423",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01056506"
            },
            {
              "name": "http://www.php.net/releases/5_2_1.php",
              "refsource": "MISC",
              "url": "http://www.php.net/releases/5_2_1.php"
            },
            {
              "name": "24606",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24606"
            },
            {
              "name": "2315",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/2315"
            },
            {
              "name": "24642",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24642"
            },
            {
              "name": "php-zendhashinit-dos(32709)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32709"
            },
            {
              "name": "24217",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24217"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm"
            },
            {
              "name": "24248",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24248"
            },
            {
              "name": "HPSBTU02232",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01086137"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1088",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1088"
            },
            {
              "name": "oval:org.mitre.oval:def:11092",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11092"
            },
            {
              "name": "24284",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24284"
            },
            {
              "name": "USN-424-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-424-2"
            },
            {
              "name": "32762",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/32762"
            },
            {
              "name": "GLSA-200703-21",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200703-21.xml"
            },
            {
              "name": "SSRT071429",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01086137"
            },
            {
              "name": "24432",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24432"
            },
            {
              "name": "24421",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24421"
            },
            {
              "name": "ADV-2007-2374",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2374"
            },
            {
              "name": "25423",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25423"
            },
            {
              "name": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=228858",
              "refsource": "MISC",
              "url": "http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=228858"
            },
            {
              "name": "RHSA-2007:0076",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0076.html"
            },
            {
              "name": "24419",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24419"
            },
            {
              "name": "RHSA-2007:0089",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2007-0089.html"
            },
            {
              "name": "RHSA-2007:0088",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0088.html"
            },
            {
              "name": "20070227 rPSA-2007-0043-1 php php-mysql php-pgsql",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/461462/100/0/threaded"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm"
            },
            {
              "name": "HPSBMA02215",
              "refsource": "HP",
              "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en\u0026cc=us\u0026objectID=c01056506"
            },
            {
              "name": "RHSA-2007:0082",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0082.html"
            },
            {
              "name": "25850",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25850"
            },
            {
              "name": "20070201-01-P",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc"
            },
            {
              "name": "MDKSA-2007:048",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:048"
            },
            {
              "name": "SUSE-SA:2007:032",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_32_php.html"
            },
            {
              "name": "USN-424-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-424-1"
            },
            {
              "name": "RHSA-2007:0081",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0081.html"
            },
            {
              "name": "24322",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24322"
            },
            {
              "name": "24236",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24236"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-0988",
    "datePublished": "2007-02-20T17:00:00",
    "dateReserved": "2007-02-16T00:00:00",
    "dateUpdated": "2024-08-07T12:43:22.216Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature