PHP Multiple Security Vulnerabilities (CVE-2011-1938)

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: HIGH

  Advisory Date: JUL 21, 2015

---

  DESCRIPTION

Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1005428