CVE-2017-5358

CRITICAL

EasyCom for PHP 4.0.0.29 - Buffer Overflow

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2017-5358. PoCs published by hyp3rlinx.

AI-analyzed exploit summary This exploit demonstrates a stack-based buffer overflow in the EASYCOM AS400 (iBMI) PHP API, leading to arbitrary code execution. The PoC triggers the vulnerability via crafted input to functions like `i5_connect`, `i5_pconnect`, and `i5_private_connect`.

Description

Stack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allows remote attackers to execute arbitrary code via the server argument to the (1) i5_connect, (2) i5_pconnect, or (3) i5_private_connect API function.

Exploits (1)

exploitdb WORKING POC
by hyp3rlinx · textdoswindows
https://www.exploit-db.com/exploits/41425

This exploit demonstrates a stack-based buffer overflow in the EASYCOM AS400 (iBMI) PHP API, leading to arbitrary code execution. The PoC triggers the vulnerability via crafted input to functions like `i5_connect`, `i5_pconnect`, and `i5_private_connect`.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: EASYCOM AS400 (iBMI) PHP API (EasycomPHP_4.0029.iC8im2.exe)
No auth needed
Prerequisites: PHP 5.3.1 with EasyCom PHP API module · Network access to the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/96419
Third Party Advisory, VDB Entry mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2017/Feb/60
Exploit, Third Party Advisory, VDB Entry x_refsource_misc
http://packetstormsecurity.com/files/141299/EasyCom-AS400-PHP-API-Buffer-Overflow.html
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/41425/

Scores

CVSS v3 9.8
EPSS 0.1215
EPSS Percentile 95.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (1)
easycom-aura/easycom_for_php 4.0.0.29
Published Mar 15, 2017
Tracked Since Feb 18, 2026