CVE-2008-1488

Alternative PHP Cache (APC) <3.0.16 - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 through 3.0.16 allows remote attackers to execute arbitrary code via a long filename.

Exploits (1)

exploitdb WORKING POC VERIFIED

by dannyp · phpremotelinux

https://www.exploit-db.com/exploits/31540

View Code ZIP pw:eip

References (11)

[Various Sources] http://papasian.org/~dannyp/apcsmash.php.txt

[Exploit] http://pecl.php.net/bugs/bug.php?id=13415

[Vendor Advisory] http://secunia.com/advisories/29509

[Vendor Advisory] http://secunia.com/advisories/29745

[Third Party Advisory] http://secunia.com/advisories/31082

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDVSA-2008:082

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/41420

[Vendor Advisory] https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00548.html

[Vendor Advisory] https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00582.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/28457

[Third Party Advisory] http://security.gentoo.org/glsa/glsa-200804-07.xml

Scores

EPSS 0.0732

EPSS Percentile 91.7%

Details

CWE

CWE-119

Status published

Products (8)

pecl-php/alternative_php_cache 3.0.11

pecl-php/alternative_php_cache 3.0.12

pecl-php/alternative_php_cache 3.0.12p1

pecl-php/alternative_php_cache 3.0.12p2

pecl-php/alternative_php_cache 3.0.13

pecl-php/alternative_php_cache 3.0.14

pecl-php/alternative_php_cache 3.0.15

pecl-php/alternative_php_cache 3.0.16

Published Mar 24, 2008

Tracked Since Feb 18, 2026