CVE-2007-2844 in PHPinfo

Summary

PHP 4.x and 5.x before 5.2.1, when running on multi-threaded systems, does not ensure thread safety for libc crypt function calls using protection schemes such as a mutex, which creates race conditions that allow remote attackers to overwrite internal program memory and gain system access.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

05/24/2007

Disclosure

05/24/2007

CPE

ready

CVSS

10.0

EPSS

0.00950

Activities

Very Low

Sources

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!