CVE-2007-2844 Race condition in n/a
Remote attackers can exploit race conditions in PHP's crypt function on multi-threaded systems to overwrite memory and gain system access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-2844?
CVE-2007-2844 is a critical vulnerability in Php Php, published on 24 May 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
PHP 4.x and 5.x before 5.2.1, when running on multi-threaded systems, does not ensure thread safety for libc crypt function calls using protection schemes such as a mutex, which creates race conditions that allow remote attackers to overwrite internal program memory and gain system access.
Which versions are affected by CVE-2007-2844?
It affects 1 product.
Products include Php Php.
How do I fix CVE-2007-2844?
No fix has been published for CVE-2007-2844 yet. Limit exposure of the affected software until one is available.
Is CVE-2007-2844 being exploited?
There is no known exploitation of CVE-2007-2844 in the wild and no public exploit code.
Other vulnerabilities in Php Php
Sources
Also known as GHSA-rjv2-78g6-p67p.