CVE-2007-2509
CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2...
CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands.
Exploit likelihood
What each source reports
NVD Score used
2.6
CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands.
- Record
CVE-2007-2509- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:P/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands.
- Record
CVE-2007-2509- Updated
- 2026-11-02
EUVDEUVD-2007-2502 No score
CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands.
- Record
EUVD-2007-2502- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xcv3-8774-8394 No score
CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2...
CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands.
- Record
GHSA-xcv3-8774-8394- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php5Debian:4.0 From an advisory covering 2 CVEs |
before 5.2.0-8+etch4, plus listed versions 5.2.0-8+etch15.2.0-8+etch3 |
5.2.0-8+etch4 |
php4Debian:4.0 |
before 6:4.4.4-8+etch3, plus listed versions 6:4.4.4-8+etch16:4.4.4-8+etch2 |
6:4.4.4-8+etch3 |
php4Debian:3.1 |
before 4:4.3.10-21, plus listed versions 4:4.3.10-154:4.3.10-164:4.3.10-174:4.3.10-184:4.3.10-194:4.3.10-20 |
4:4.3.10-21 |
php5Debian:5.0 From an advisory covering 18 CVEs |
before 5.2.0-10+lenny1 | 5.2.0-10+lenny1 |
php4Debian:5.0 From an advisory covering 7 CVEs |
before 6:4.4.4-9+lenny1, plus listed versions 4.0.3pl1-0potato34.0.3pl1-0potato44:4.1.2-74:4.1.2-7.0.14:4.1.2-7.woody3 Show 41 moreShow less4:4.1.2-7.woody44:4.1.2-7.woody54:4.1.2-7woody14:4.1.2-7woody24:4.3.10-104:4.3.10-114:4.3.10-124:4.3.10-134:4.3.10-144:4.3.10-154:4.3.10-164:4.3.10-174:4.3.10-184:4.3.10-194:4.3.10-204:4.3.10-214:4.3.10-224:4.3.10-84:4.3.10-94:4.4.0-14:4.4.0-24:4.4.0-34:4.4.0-44:4.4.2-14:4.4.2-1+b14:4.4.2-1.14:4.4.4-14:4.4.4-24:4.4.4-34:4.4.4-44:4.4.4-4~44:4.4.4-54:4.4.4-64:4.4.4-76:4.4.4-86:4.4.4-8+etch16:4.4.4-8+etch26:4.4.4-8+etch36:4.4.4-8+etch46:4.4.4-8+etch66:4.4.4-9 |
6:4.4.4-9+lenny1 |
phpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-cliRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-commonRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-dbaRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
Show 179 moreShow less
| Package | Affected | Fixed |
|---|---|---|
php-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-gdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-imapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-ldapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-odbcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-pdoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-snmpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-soapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-xmlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
phpRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-bcmathRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-cliRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-commonRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-dbaRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-develRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-gdRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-imapRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-ldapRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-mbstringRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-mysqlRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-ncursesRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-odbcRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-pdoRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-pgsqlRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-snmpRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-soapRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-xmlRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
php-xmlrpcRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 0:5.1.6-12.el5 | 0:5.1.6-12.el5 |
phpRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-domxmlRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-gdRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-imapRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-ldapRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-mbstringRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-mysqlRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-ncursesRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-odbcRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-pearRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-pgsqlRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-snmpRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-xmlrpcRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
phpRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-domxmlRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-gdRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-imapRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-ldapRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-mbstringRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-mysqlRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-ncursesRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-odbcRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-pearRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-pgsqlRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-snmpRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
phpRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-domxmlRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-gdRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-imapRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-ldapRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-mbstringRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-mysqlRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-ncursesRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-odbcRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-pearRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-pgsqlRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-snmpRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-xmlrpcRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
phpRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-domxmlRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-gdRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-imapRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-ldapRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-mbstringRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-mysqlRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-ncursesRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-odbcRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-pearRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-pgsqlRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-snmpRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
php-xmlrpcRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.3.9-3.22.5 | 0:4.3.9-3.22.5 |
phpRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-bcmathRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-cliRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-commonRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-dbaRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-debuginfoRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-develRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-gdRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-imapRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-ldapRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-mbstringRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-mysqlRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-ncursesRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-odbcRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-pdoRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-pgsqlRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-snmpRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-soapRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-xmlRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
php-xmlrpcRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.1.6-3.el4s1.7 | 0:5.1.6-3.el4s1.7 |
phpRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-develRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-imapRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-ldapRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-manualRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-mysqlRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-odbcRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-pgsqlRed Hat:enterprise_linux:2.1::as From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
phpRed Hat:enterprise_linux:2.1::aw From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-imapRed Hat:enterprise_linux:2.1::aw From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-ldapRed Hat:enterprise_linux:2.1::aw From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-manualRed Hat:enterprise_linux:2.1::aw From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-mysqlRed Hat:enterprise_linux:2.1::aw From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-odbcRed Hat:enterprise_linux:2.1::aw From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-pgsqlRed Hat:enterprise_linux:2.1::aw From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
phpRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-develRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-imapRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-ldapRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-manualRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-mysqlRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-odbcRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-pgsqlRed Hat:enterprise_linux:2.1::es From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
phpRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-imapRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-ldapRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-manualRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-mysqlRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-odbcRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
php-pgsqlRed Hat:enterprise_linux:2.1::ws From an advisory covering 5 CVEs |
before 0:4.1.2-2.19 | 0:4.1.2-2.19 |
phpRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-develRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-imapRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-ldapRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-mysqlRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-odbcRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-pgsqlRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
phpRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-develRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-imapRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-ldapRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-mysqlRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-odbcRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-pgsqlRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
phpRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-develRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-imapRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-ldapRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-mysqlRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-odbcRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-pgsqlRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
phpRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-develRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-imapRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-ldapRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-mysqlRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-odbcRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
php-pgsqlRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:4.3.2-43.ent | 0:4.3.2-43.ent |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| aliases | ||
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2509 is a low vulnerability (CVSS 2.6) in Php, published May 9, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.07%, the 81st percentile. Fixed in php4 6:4.4.4-8+etch3.
References
secunia.com/advisories/25660
mandriva.com/security/advisories?name=MDKSA-2007:103
secunia.com/advisories/25187
secunia.com/advisories/25191
ubuntu.com/usn/usn-462-1
vupen.com/english/advisories/2007/2187
Show 85 moreShow less
redhat.com/support/errata/RHSA-2007-0888.html
mandriva.com/security/advisories?name=MDKSA-2007:102
secunia.com/advisories/26048
debian.org/security/2007/dsa-1296
redhat.com/support/errata/RHSA-2007-0355.html
security.gentoo.org/glsa/glsa-200705-19.xml
secunia.com/advisories/26967
secunia.com/advisories/27351
trustix.org/errata/2007/0017
securityfocus.com/bid/23818
securityfocus.com/bid/23813
us2.php.net/releases/4_4_7.php
redhat.com/support/errata/RHSA-2007-0349.html
debian.org/security/2007/dsa-1295
secunia.com/advisories/25318
exchange.xforce.ibmcloud.com/vulnerabilities/34413
securityfocus.com/archive/1/463596/100/0/threaded
rhn.redhat.com/errata/RHSA-2007-0889.html
us2.php.net/releases/5_2_2.php
secunia.com/advisories/25365
securityreason.com/securityalert/2672
secunia.com/advisories/25255
secunia.com/advisories/25445
support.avaya.com/elmodocs2/security/ASA-2007-231.htm
secunia.com/advisories/25372
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10839
securitytracker.com/id?1018022
rhn.redhat.com/errata/RHSA-2007-0348.html
lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
nvd.nist.gov/vuln/detail/CVE-2007-2509
github.com/advisories/GHSA-xcv3-8774-8394
access.redhat.com/errata/RHSA-2007:0348
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=239015
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0348.json
access.redhat.com/security/cve/CVE-2007-1864
bugzilla.redhat.com/show_bug.cgi?id=239009
cve.org/CVERecord?id=CVE-2007-1864
nvd.nist.gov/vuln/detail/CVE-2007-1864
access.redhat.com/security/cve/CVE-2007-2509
bugzilla.redhat.com/show_bug.cgi?id=239014
cve.org/CVERecord?id=CVE-2007-2509
access.redhat.com/security/cve/CVE-2007-2510
bugzilla.redhat.com/show_bug.cgi?id=239012
cve.org/CVERecord?id=CVE-2007-2510
nvd.nist.gov/vuln/detail/CVE-2007-2510
access.redhat.com/errata/RHSA-2007:0349
redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=239017
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0349.json
access.redhat.com/errata/RHSA-2007:0355
bugzilla.redhat.com/show_bug.cgi?id=239020
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0355.json
access.redhat.com/errata/RHSA-2007:0888
bugzilla.redhat.com/show_bug.cgi?id=242032
bugzilla.redhat.com/show_bug.cgi?id=250726
bugzilla.redhat.com/show_bug.cgi?id=278031
bugzilla.redhat.com/show_bug.cgi?id=278041
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0888.json
access.redhat.com/security/cve/CVE-2007-2872
cve.org/CVERecord?id=CVE-2007-2872
nvd.nist.gov/vuln/detail/CVE-2007-2872
access.redhat.com/security/cve/CVE-2007-3799
cve.org/CVERecord?id=CVE-2007-3799
nvd.nist.gov/vuln/detail/CVE-2007-3799
access.redhat.com/security/cve/CVE-2007-3996
cve.org/CVERecord?id=CVE-2007-3996
nvd.nist.gov/vuln/detail/CVE-2007-3996
access.redhat.com/security/cve/CVE-2007-4670
cve.org/CVERecord?id=CVE-2007-4670
nvd.nist.gov/vuln/detail/CVE-2007-4670
access.redhat.com/errata/RHSA-2007:0889
bugzilla.redhat.com/show_bug.cgi?id=242033
bugzilla.redhat.com/show_bug.cgi?id=276081
bugzilla.redhat.com/show_bug.cgi?id=278011
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0889.json
access.redhat.com/security/cve/CVE-2007-2756
cve.org/CVERecord?id=CVE-2007-2756
nvd.nist.gov/vuln/detail/CVE-2007-2756
access.redhat.com/security/cve/CVE-2007-3998
cve.org/CVERecord?id=CVE-2007-3998
nvd.nist.gov/vuln/detail/CVE-2007-3998
access.redhat.com/security/cve/CVE-2007-4658
cve.org/CVERecord?id=CVE-2007-4658
nvd.nist.gov/vuln/detail/CVE-2007-4658