CVE-2011-1938

Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

23.13% chance of exploitation in the next 30 days, 98th percentile

Published

2011-05-31

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/17318/

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/17486
• https://www.exploit-db.com/exploits/17318

References

• CVE Record
• NVD entry

Related

• CVE-2011-1937
• CVE-2011-1939
• CVE-2011-1930
• CVE-2011-1944
• CVE-2011-1900
• CVE-2011-1956