PHP 5.3.x < 5.3.2 - 'ext/phar/stream.c' / 'ext/phar/dirstream.c' Multiple Format String Vulnerabilities

• Exploit Database
• 131 阅读

• 作者： Stefan Esser
  日期： 2010-05-14
• 类别：

  • remote
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/33988/
• 1 2 3 4 5 6 7 8 9 10 11

  source: https://www.securityfocus.com/bid/40173/info     PHP is prone to multiple format-string vulnerabilities because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function.   Attackers can exploit these issues to run arbitrary code within the context of the PHP process. This may allow them to bypass intended security restrictions or gain elevated privileges.   PHP 5.3 through 5.3.2 are vulnerable.   $ php -r "fopen('phar:///usr/bin/phar.phar/*%08x-%08x-%08x-%08x-%08x-%08x-%08x-%08x-%08x','r');"