PHP 5.3.6 Buffer Overflow PoC (ROP) CVE-2011-1938
/* ** Jonathan Salwan – @shell_storm ** http://shell-storm.org ** 2011-06-04 ** ** http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1938 ** ** Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c ** in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary ** code via a long pathname for a UNIX socket. */ echo “[+] PHP 5.3.6 Buffer Overflow PoC …