Bug 278161 (CVE-2007-4660, CVE-2007-4661) - CVE-2007-4661 php size calculation in chunk_split
Summary: CVE-2007-4661 php size calculation in chunk_split
Alias: CVE-2007-4660, CVE-2007-4661
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL: http://nvd.nist.gov/nvd.cfm?cvename=C...
Depends On: 297901
TreeView+ depends on / blocked
Reported: 2007-09-05 10:32 UTC by Joe Orton
Modified: 2019-09-29 12:21 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Last Closed: 2010-01-28 22:59:17 UTC

Attachments (Terms of Use)

System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2007:0917 0 normal SHIPPED_LIVE Moderate: php security update 2007-10-23 15:56:13 UTC

Description Joe Orton 2007-09-05 10:32:07 UTC

# Fixed size calculation in chunk_split() (Reported by Gerhard Wagner)

Comment 2 Joe Orton 2007-09-05 12:58:47 UTC
This issue was due to an incomplete fix for CVE-2007-2872 (CVE-2007-2872), which
has not been applied in Red Hat Enterprise Linux v2-5, nor Red Hat Application
Stack v1.

Comment 5 Vincent Danen 2010-01-28 22:59:17 UTC
I'm also adding CVE-2007-4660 to this issue as there is some confusion surrounding CVE-2007-4660 and how it pertains to CVE-2007-4661.

CVE-2007-2872 was partially fixed in upstream PHP 5.2.3, but the code remained vulnerable to attack.  This remaining vulnerability was named CVE-2007-4661.  While this was fixed upstream in PHP 5.2.4, it took two separate commits to fully fix it, resulting in (likely by mistake) two separate entries in the NEWS file, which resulted in CVE-2007-4660 being assigned to the second (arguably duplicate) CVE.

Because the incomplete fix for CVE-2007-2872 had not been applied to PHP packages in Red Hat Enterprise Linux 2 through 5, nor Red Hat Application Stack v1, neither CVE-2007-4660 or CVE-2007-4661 are applicable.  The fix provided for Red Hat Application Stack v2 corrected both CVEs, via RHSA-2007:0917:


Note You need to log in before you can comment on or make changes to this bug.