CVE-2007-1413
PHP < 5.2.3 - Buffer Overflow in SNMP Extension via snmpget Function
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2007-1413. PoCs published by Inphex, shinnai, rgod.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in the SNMP extension for PHP. It uses a crafted SNMP request with a malicious payload to execute arbitrary shellcode, resulting in a bind shell on TCP port 4444.
Description
Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably other PHP 4 versions, allows context-dependent attackers to execute arbitrary code via a long value in the third argument (object id).
Exploits (3)
This exploit targets a buffer overflow vulnerability in the SNMP extension for PHP. It uses a crafted SNMP request with a malicious payload to execute arbitrary shellcode, resulting in a bind shell on TCP port 4444.
This exploit targets a buffer overflow vulnerability in PHP's snmpget() function (CVE-2007-1413) by overwriting the EIP register with a call to ESP, followed by NOP sleds and shellcode to execute calc.exe. It requires the SNMP extension to be loaded.
This exploit targets a buffer overflow vulnerability in PHP 4.4.6's snmpget() function. It uses a crafted object ID to overwrite the EIP and execute arbitrary shellcode, launching 'notepad' as a proof of concept.