CVEs-PoC/2011/CVE-2011-1938.md

CVE-2011-1938

Description

Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.

POC

Reference

• http://securityreason.com/securityalert/8262
• http://securityreason.com/securityalert/8294

Github

• https://github.com/mudongliang/LinuxFlaw
• https://github.com/oneoy/cve-