>> PHP "mysql_connect" Named Pipe Handling Buffer Overflow Vulnerability
Title : PHP "mysql_connect" Named Pipe Handling Buffer Overflow Vulnerability VUPEN ID : VUPEN/ADV-2006-0046 CVE ID : CVE-2006-0097
Rated as : Moderate Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2006-01-05
Technical Description
A vulnerability has been identified in PHP, which could be exploited by attackers to execute arbitrary commands. This flaw is due to a stack overflow error in the "create_named_pipe()" [libmysql.c] function that does not properly handle an overly long named pipe string passed to the "server" parameter of the "mysql_connect()" function, which could be exploited by attackers who can call a specially crafted "mysql_connect()" function to execute arbitrary commands on a vulnerable server.
