CVE-2007-3205 The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names...
MediumCVSS 5.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hardened-php project hardened-php | All versions | No fix listed |
| hardened-php project subhosin | All versions | No fix listed |
| PHP | All versions | No fix listed |
References
- 39834 vdb-entry
- 2800 third-party-advisory
- www.acid-root.new.fr
- 20070612 PHP parse_str() arbitrary variable overwrite mailing-list
- 20070612 Re: PHP parse_str() arbitrary variable overwrite mailing-list
- 20070613 Re: PHP parse_str() arbitrary variable overwrite mailing-list
- php-parsestr-code-execution(34836) vdb-entry