PHP shared memory functions (shmop) are prone to an arbitrary-code- execution vulnerability. An attacker may exploit this issue to execute arbitrary code within the context of the affected webserver. The attacker may also gain access to RSA keys of the SSL certificate. This issue affects PHP 4 versions prior to 4.4.5 and PHP 5 versions prior to 5.2.1.

The vendor released versions 4.4.5 and 5.2.1 to address this issue. Please see the references for more information.

• http://www.php-security.org/MOPB/MOPB-15-2007.html
• http://www.php.net
• http://www.securityfocus.com/bid/22862

---

Updated on 2017-03-28