CVE-2007-1411

Buffer overflow in PHP 4.4.6 and earlier, and unspecified PHP 5 versions, allows local and possibly remote attackers to execute arbitrary code via long server name arguments to the (1) mssql_connect and (2) mssql_pconnect functions.

• http://retrogod.altervista.org/php_446_mssql_connect_bof.htmlBroken Link
• http://secunia.com/advisories/24353Third Party Advisory
• http://securityreason.com/securityalert/2407Exploit, Third Party Advisory
• http://www.securityfocus.com/archive/1/462010/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/22832Exploit, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/0867Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32885Third Party Advisory, VDB Entry
• http://retrogod.altervista.org/php_446_mssql_connect_bof.htmlBroken Link
• http://secunia.com/advisories/24353Third Party Advisory
• http://securityreason.com/securityalert/2407Exploit, Third Party Advisory
• http://www.securityfocus.com/archive/1/462010/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/22832Exploit, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/0867Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32885Third Party Advisory, VDB Entry

Published

Mar 10, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1405Cross-site scripting (XSS) vulnerability in the "download wi…
• CVE-2007-1406Trac before 0.10.3.1 does not send a Content-Disposition HTT…
• CVE-2007-1407Unspecified vulnerability in OpenSolution Quick.Cart before …
• CVE-2007-1408Multiple vulnerabilities in (1) bank.php, (2) landfill.php, …
• CVE-2007-1409WordPress allows remote attackers to obtain sensitive inform…
• CVE-2007-1410SQL injection vulnerability in kategori.asp in GaziYapBoz Ga…
• CVE-2007-1412The cpdf_open function in the ClibPDF (cpdf) extension in PH…
• CVE-2007-1413Buffer overflow in the snmpget function in the snmp extensio…
• CVE-2007-1414Multiple PHP remote file inclusion vulnerabilities in Copper…
• CVE-2007-1415Multiple PHP remote file inclusion vulnerabilities in PMB Se…
• CVE-2007-1416PHP remote file inclusion vulnerability in createurl.php in …
• CVE-2007-1417SQL injection vulnerability in index.php in HC NEWSSYSTEM 1.…