PHP 4.x and 5.x before 5.2.1, when running on multi-threaded systems, does not ensure thread safety for libc crypt function calls using protection schemes such as a mutex, which creates race conditions that allow remote attackers to overwrite internal program memory and gain system access.
                
            References
                    Configurations
                    Configuration 1 (hide)
                                
                                
  | 
                        
Information
                Published : 2007-05-24 11:30
Updated : 2018-10-30 09:25
NVD link : CVE-2007-2844
Mitre link : CVE-2007-2844
JSON object : View
CWE
                Products Affected
                php
- php
 


