CVE-2007-0908: canonical ubuntu_linux Improper Input Validation

Modified

Published 13-02-2007Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2007-0908 is a medium (CVSS 5.0) Improper Input Validation vulnerability in canonical ubuntu_linux. EPSS estimates a 12.20% chance of exploitation in the next 30 days, higher than 96.1% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 04-03-2007)

Source freshness unavailable

How is this decided?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

12.20%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 6

DSA-1264-1 RHSA-2007:0076 RHSA-2007:0081 RHSA-2007:0082 RHSA-2007:0088 RHSA-2007:0089

Timeline

13-02-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

12.20%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

No change 0.00 pp

From 12.20% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

exploit-databaselocalmultipleVerified
PHP < 4.4.5/5.2.1 - WDDX Session Deserialization Information Leak
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Canonical1 product

ubuntu_linuxEOL5.10 | 6.06 | 6.10

Php1 product

phpEOL≥ 4.0.0, < 4.4.5 | ≥ 5.0.0, < 5.2.1 | 4.0 | 4.0:beta_4_patch1 | 4.0:beta1 | 4.0:beta2 | 4.0:beta3 | 4.0:beta4 | 4.0:rc1 | 4.0:rc2

2 vendors · 2 products

References

42 links

www.us.debian.org/security/2007/dsa-1264Vendor AdvisoryX Refsource DEBIANBroken Link
secunia.com/advisories/24295Third Party AdvisoryX Refsource SECUNIA
www.trustix.org/errata/2007/0009/Vendor AdvisoryX Refsource TRUSTIXBroken Link
www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.htmlVendor AdvisoryX Refsource OPENPKGThird Party Advisory
secunia.com/advisories/24195Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1017671VDB EntryX Refsource SECTRACKThird Party Advisory
secunia.com/advisories/24606Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24642Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24217Third Party AdvisoryX Refsource SECUNIA
osvdb.org/32766VDB EntryX Refsource OSVDBBroken Link

Show all 42 references

support.avaya.com/elmodocs2/security/ASA-2007-101.htmX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/24248Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/32493VDB EntryX Refsource XFThird Party Advisory
secunia.com/advisories/24514Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/22496VDB EntryX Refsource BIDPatchThird Party Advisory
issues.rpath.com/browse/RPL-1088X Refsource CONFIRMBroken Link
secunia.com/advisories/24284Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-424-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.php.net/releases/5_2_1.phpX Refsource CONFIRMThird Party Advisory
security.gentoo.org/glsa/glsa-200703-21.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11185VDB EntrySignatureX Refsource OVALThird Party Advisory
secunia.com/advisories/24432Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24421Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24089Third Party AdvisoryX Refsource SECUNIA
lists.suse.com/archive/suse-security-announce/2007-Mar/0003.htmlVendor AdvisoryX Refsource SUSEBroken Link
securityreason.com/securityalert/2321Third Party AdvisoryX Refsource SREASON
www.redhat.com/support/errata/RHSA-2007-0076.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/24419Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2007-0089.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.redhat.com/support/errata/RHSA-2007-0088.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.securityfocus.com/archive/1/461462/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
support.avaya.com/elmodocs2/security/ASA-2007-136.htmX Refsource CONFIRMThird Party Advisory
www.redhat.com/support/errata/RHSA-2007-0082.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.securityfocus.com/bid/22806VDB EntryX Refsource BIDThird Party Advisory
www.php.net/ChangeLog-5.phpX Refsource CONFIRMThird Party Advisory
www.mandriva.com/security/advisories?name=MDKSA-2007:048Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
www.php-security.org/MOPB/MOPB-11-2007.htmlX Refsource MISCThird Party Advisory
www.ubuntu.com/usn/usn-424-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.redhat.com/support/errata/RHSA-2007-0081.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/24322Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24236Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2007/0546VDB EntryX Refsource VUPENPermissions RequiredThird Party Advisory