CVE-2007-1401: Buffer Overflow
Published Mar 10, 2007
·Updated
Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4.4.6 and other versions before 5.0.0, might allow local users to gain privileges via a long argument to the crackopendict function.
Affected Software
1 affected component
PHP PHP=4.4.6
Event History
Mar 10, 2007
CVE Published
10:19 PM
Mar 11, 2007
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1401?
CVE-2007-1401 is classified as having a medium severity due to its potential to allow local privilege escalation.
2
How do I fix CVE-2007-1401?
To fix CVE-2007-1401, upgrade PHP to version 5.0.0 or later, where the vulnerability is resolved.
3
What versions of PHP are affected by CVE-2007-1401?
CVE-2007-1401 affects PHP version 4.4.6 and earlier versions before 5.0.0.
4
Can CVE-2007-1401 be exploited remotely?
CVE-2007-1401 is primarily a local exploit, meaning it requires local access to the system to take advantage of the buffer overflow.
5
What is the impact of CVE-2007-1401 on systems?
If exploited, CVE-2007-1401 could allow an attacker to gain elevated privileges on the affected system.