Bug 285881 - (CVE-2007-4782) CVE-2007-4782 php crash in glob() and fnmatch() functions
CVE-2007-4782 php crash in glob() and fnmatch() functions
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
All Linux
low Severity low
: ---
: ---
Assigned To: Red Hat Product Security
: Reopened, Security
: 382451 (view as bug list)
Depends On: 445919 445920 445921 445922 445923 445924 445925
  Show dependency treegraph
Reported: 2007-09-11 09:12 EDT by Tomas Hoger
Modified: 2011-04-13 14:46 EDT (History)
3 users (show)

See Also:
Fixed In Version: 5.2.6-2.fc8
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2010-03-29 04:28:30 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Tomas Hoger 2007-09-11 09:12:43 EDT
Common Vulnerabilities and Exposures assigned an identifier CVE-2007-4782 to the following vulnerability:

PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined characteristics, as demonstrated by a "*[1]e" value.  NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.


Comment 1 Josh Bressers 2007-09-12 14:52:35 EDT
We do not consider these to be security issues. For more details see
and http://www.php.net/security-note.php
Comment 3 Tomas Hoger 2007-11-29 10:15:17 EST
*** Bug 382451 has been marked as a duplicate of this bug. ***
Comment 6 Tomas Hoger 2008-06-12 08:16:11 EDT
Re-opening this bug.  We will be addressing fnmatch() issue in the next PHP
update, as the argument passed to it may be untrusted user data.  Documentation
for the functions suggests usage of fnmatch() as a light-weight alternative to
regular expression handling functions for implementing pattern search
functionality in the PHP applications.

Comment 7 Fedora Update System 2008-06-14 00:20:08 EDT
php-5.2.6-2.fc8 has been pushed to the Fedora 8 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update php'.  You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F8/FEDORA-2008-3864
Comment 8 Fedora Update System 2008-06-20 15:08:16 EDT
php-5.2.6-2.fc8 has been pushed to the Fedora 8 stable repository.  If problems still persist, please make note of it in this bug report.
Comment 10 Tomas Hoger 2011-04-13 14:46:02 EDT
(In reply to comment #2)
> Issues were addressed in PHP 5.2.5, patches:
> fnmatch:
> http://cvs.php.net/viewvc.cgi/php-src/ext/standard/file.c?r1=1.409.
> glob:
> http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=

These links no longer work, as upstream moved CVS to using SVN.  Relevant commit in the upstream SVN:

Note You need to log in before you can comment on or make changes to this bug.