CVE-2007-3806

The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter, probably related to memory corruption or an invalid read on win32 platforms, and possibly related to lack of initialization for a glob structure.

• CWE-20
• CWE-399

• http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166&r2=1.167
• http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log
• http://osvdb.org/36085
• http://secunia.com/advisories/26085Vendor Advisory
• http://secunia.com/advisories/26642Vendor Advisory
• http://secunia.com/advisories/27102Vendor Advisory
• http://secunia.com/advisories/30158Vendor Advisory
• http://secunia.com/advisories/30288Vendor Advisory
• http://www.debian.org/security/2008/dsa-1572
• http://www.debian.org/security/2008/dsa-1578
• http://www.exploit-db.com/exploits/4181
• http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml
• http://www.php.net/ChangeLog-5.php#5.2.4
• http://www.php.net/releases/5_2_4.php
• http://www.securityfocus.com/bid/24922
• http://www.securityfocus.com/bid/25498
• http://www.vupen.com/english/advisories/2007/2547Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35437
• http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166&r2=1.167
• http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log
• http://osvdb.org/36085
• http://secunia.com/advisories/26085Vendor Advisory
• http://secunia.com/advisories/26642Vendor Advisory
• http://secunia.com/advisories/27102Vendor Advisory
• http://secunia.com/advisories/30158Vendor Advisory
• http://secunia.com/advisories/30288Vendor Advisory
• http://www.debian.org/security/2008/dsa-1572
• http://www.debian.org/security/2008/dsa-1578
• http://www.exploit-db.com/exploits/4181
• http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml
• http://www.php.net/ChangeLog-5.php#5.2.4
• http://www.php.net/releases/5_2_4.php
• http://www.securityfocus.com/bid/24922
• http://www.securityfocus.com/bid/25498
• http://www.vupen.com/english/advisories/2007/2547Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35437

Published

Jul 17, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-3800Unspecified vulnerability in the Real-time scanner (RTVScan)…
• CVE-2007-3801Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2007-3802Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2007-3803The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.…
• CVE-2007-3804The AntiVirus engine in the HTTP-ALG in Clavister CorePlus b…
• CVE-2007-3805The IKE implementation in Clavister CorePlus before 8.80.03,…
• CVE-2007-3807Multiple cross-site scripting (XSS) vulnerabilities in SiteS…
• CVE-2007-3808SQL injection vulnerability in includes/search.php in paFile…
• CVE-2007-3809Multiple SQL injection vulnerabilities in Prozilla Directory…
• CVE-2007-3810SQL injection vulnerability in index.php in Realtor 747 allo…
• CVE-2007-3811Multiple SQL injection vulnerabilities in eSyndiCat allow re…
• CVE-2007-3812SQL injection vulnerability in forums.php in CMScout 1.23 an…