oss-security - CVE Request: PHP PECL module APC vulnerable to stack-based buffer overflow

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / community lists wiki CVSweb mirrors signatures
bringing security into open environments

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [thread-next>] [month] [year] [list]

Date:  Sat, 22 Mar 2008 18:58:41 -0400
From:  Micah Anderson <micah@...eup.net>
To: oss-security@...ts.openwall.com
Subject:  CVE Request: PHP PECL module APC vulnerable to stack-based buffer overflow

As this ticket demonstrates, the popular PHP PECL extension APC
(Alternative PHP Cache: http://pecl.php.net/package/APC), which is
slated for inclusion in PHP core in PHP6, is vulnerable to a stack-based
buffer overflow attack due to no bounds checking, which can lead to a
privilege escalation.

http://pecl.php.net/bugs/bug.php?id=13415

The vulnerable code appeared in the APC CVS on June 30th, so APC 3.0.11
and newer are vulnerable.

Thanks,
Micah

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.