Description
Stack-based buffer overflow in the suhosin_encrypt_single_cookie function in the transparent cookie-encryption feature in the Suhosin extension before 0.9.33 for PHP, when suhosin.cookie.encrypt and suhosin.multiheader are enabled, might allow remote attackers to execute arbitrary code via a long string that is used in a Set-Cookie HTTP header.
References
- https://bugzilla.redhat.com/show_bug.cgi?id=783350
- [oss-security] 20120124 Re: CVE requests: Suhosin extension / as31 mailing-list
- SUSE-SU-2012:0411 vendor-advisory
- openSUSE-SU-2012:0426 vendor-advisory
- [oss-security] 20120124 CVE requests: Suhosin extension / as31 mailing-list
- SUSE-SU-2012:0472 vendor-advisory
- 48668 third-party-advisory
- 20120119 Advisory 01/2012: Suhosin PHP Extension Transparent Cookie Encryption Stack Buffer Overflow mailing-list
- https://github.com/stefanesser/suhosin/commit/73b1968ee30f6d9d2dae497544b910e68e114bfa