HTTP: PHP FTP Genlist Method Integer Overflow

This signature detects attempts to exploit a known vulnerability in the PHP's ftp_genlist Method. Successful exploitation could lead to arbitrary code execution

Extended Description

Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow.

Affected Products

Php php

References

CVE: CVE-2015-4022

URL: http://securitytracker.com/id?1032433 http://php.net/changelog-5.php#5.6.9

Short Name

HTTP:PHP:FTP-GENLIST-IO

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: PHP FTP Genlist Method Integer Overflow

Extended Description

Affected Products

References

Found a potential security threat?