CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitra…

Exploit prediction (EPSS)

2.07% probability of exploitation in the next 30 days, higher than 81% of all scored CVEs.

CVSS scores

Classification

Weakness

• CWE-20 Improper Input Validation

Technology feeds

PHP (RSS, critical only)

References

• secunia.com /advisories/25660 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• mandriva.com /security/advisories?name=MDKSA-2007:103 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
• secunia.com /advisories/25187 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/25191 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• ubuntu.com /usn/usn-462-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
• vupen.com /english/advisories/2007/2187 · vdb-entry, x_refsource_VUPEN, x_transferred
• redhat.com /support/errata/RHSA-2007-0888.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• mandriva.com /security/advisories?name=MDKSA-2007:102 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
• secunia.com /advisories/26048 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• debian.org /security/2007/dsa-1296 · vendor-advisory, x_refsource_DEBIAN, x_transferred
• redhat.com /support/errata/RHSA-2007-0355.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• security.gentoo.org /glsa/glsa-200705-19.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
• secunia.com /advisories/26967 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/27351 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• trustix.org /errata/2007/0017/ · vendor-advisory, x_refsource_TRUSTIX, x_transferred
• securityfocus.com /bid/23818 · vdb-entry, x_refsource_BID, x_transferred
• securityfocus.com /bid/23813 · vdb-entry, x_refsource_BID, x_transferred
• us2.php.net /releases/4_4_7.php · x_refsource_CONFIRM, x_transferred
• redhat.com /support/errata/RHSA-2007-0349.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• debian.org /security/2007/dsa-1295 · vendor-advisory, x_refsource_DEBIAN, x_transferred
• secunia.com /advisories/25318 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/34413 · vdb-entry, x_refsource_XF, x_transferred
• securityfocus.com /archive/1/463596/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• rhn.redhat.com /errata/RHSA-2007-0889.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• us2.php.net /releases/5_2_2.php · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/25365 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securityreason.com /securityalert/2672 · third-party-advisory, x_refsource_SREASON, x_transferred
• secunia.com /advisories/25255 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/25445 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• support.avaya.com /elmodocs2/security/ASA-2007-231.htm · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/25372 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10839 · vdb-entry, signature, x_refsource_OVAL, x_transferred
• securitytracker.com /id?1018022 · vdb-entry, x_refsource_SECTRACK, x_transferred
• rhn.redhat.com /errata/RHSA-2007-0348.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• lists.opensuse.org /opensuse-security-announce/2007-07/msg00006.html · vendor-advisory, x_refsource_SUSE, x_transferred

Sources

• CVE List: CVE-2007-2509
• NVD: CVE-2007-2509

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.