Description

Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.

Remediation

References

CVE-2011-1938

Related Vulnerabilities

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-24599)

Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-2891)

Squid Improper Input Validation Vulnerability (CVE-2012-5643)

Moodle Improper Validation of Integrity Check Value Vulnerability (CVE-2021-20184)

WordPress Plugin Metform Elementor Contact Form Builder-Flexible and Design-Friendly Contact Form builder for WordPress Information Disclosure (2.1.3)

Severity

High

Classification

CVE-2011-1938 CWE-119

Tags

Missing Update Known Vulnerabilities