Description
Stack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 through 3.0.16 allows remote attackers to execute arbitrary code via a long filename.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- PECL 3.0.x - Alternative PHP Cache Extension 'apc_search_paths()' Remote Buffer Overflow EDB-31540 · remote · Mar 26, 2008 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- FEDORA-2008-6401 vendor-advisory
- 29745 third-party-advisory
- http://papasian.org/~dannyp/apcsmash.php.txt
- http://pecl.php.net/bugs/bug.php?id=13415
- apc-apcsearchpaths-bo(41420) vdb-entry
- 29509 third-party-advisory
- FEDORA-2008-6344 vendor-advisory
- MDVSA-2008:082 vendor-advisory
- 31082 third-party-advisory
- GLSA-200804-07 vendor-advisory
- 28457 vdb-entry