Common Vulnerabilities and Exposures assigned an identifier CVE-2007-4782 to the following vulnerability: PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined characteristics, as demonstrated by a "*[1]e" value. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution. References: http://www.securityfocus.com/archive/1/archive/1/478630/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/478626/100/0/threaded http://www.securityfocus.com/archive/1/478726/100/0/threaded
We do not consider these to be security issues. For more details see http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1 and http://www.php.net/security-note.php
Issues were addressed in PHP 5.2.5, patches: fnmatch: http://cvs.php.net/viewvc.cgi/php-src/ext/standard/file.c?r1=1.409.2.6.2.27&r2=1.409.2.6.2.28 glob: http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.147.2.3.2.10&r2=1.147.2.3.2.11
*** Bug 382451 has been marked as a duplicate of this bug. ***
Re-opening this bug. We will be addressing fnmatch() issue in the next PHP update, as the argument passed to it may be untrusted user data. Documentation for the functions suggests usage of fnmatch() as a light-weight alternative to regular expression handling functions for implementing pattern search functionality in the PHP applications. http://www.php.net/manual/en/function.fnmatch.php
php-5.2.6-2.fc8 has been pushed to the Fedora 8 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update php'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F8/FEDORA-2008-3864
php-5.2.6-2.fc8 has been pushed to the Fedora 8 stable repository. If problems still persist, please make note of it in this bug report.
https://www.redhat.com/security/data/cve/CVE-2007-4782.html
(In reply to comment #2) > Issues were addressed in PHP 5.2.5, patches: > > fnmatch: > http://cvs.php.net/viewvc.cgi/php-src/ext/standard/file.c?r1=1.409.2.6.2.27&r2=1.409.2.6.2.28 > > glob: > http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.147.2.3.2.10&r2=1.147.2.3.2.11 These links no longer work, as upstream moved CVS to using SVN. Relevant commit in the upstream SVN: http://svn.php.net/viewvc?view=revision&revision=242146