CVE-2011-1938
PHP 5.3.3-5.3.6 - Stack-Based Buffer Overflow in socket_connect
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-1938. PoCs published by Jonathan Salwan, Marek Kroemeke.
AI-analyzed exploit summary This exploit leverages a stack-based buffer overflow in PHP's socket_connect function (CVE-2011-1938) to execute arbitrary code via a crafted UNIX socket pathname. It uses ROP gadgets to bypass protections and spawn a shell.
Description
Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.
Exploits (2)
This exploit leverages a stack-based buffer overflow in PHP's socket_connect function (CVE-2011-1938) to execute arbitrary code via a crafted UNIX socket pathname. It uses ROP gadgets to bypass protections and spawn a shell.
This exploit targets a buffer overflow vulnerability in PHP 5.3.3-5.3.6 (CVE-2011-1938) by creating a large NOP sled followed by shellcode to execute arbitrary commands. It attempts to trigger the overflow via a socket connection to a crafted address.