CVE ID:	CVE-2007-3806
Description:	The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter, probably related to memory corruption or an invalid read on win32 platforms, and possibly related to lack of initialization for a glob structure.
Test IDs:	1.3.6.1.4.1.25623.1.0.61024   1.3.6.1.4.1.25623.1.0.61031
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-3806 BugTraq ID: 24922 http://www.securityfocus.com/bid/24922 BugTraq ID: 25498 http://www.securityfocus.com/bid/25498 Debian Security Information: DSA-1572 (Google Search) http://www.debian.org/security/2008/dsa-1572 Debian Security Information: DSA-1578 (Google Search) http://www.debian.org/security/2008/dsa-1578 http://www.exploit-db.com/exploits/4181 http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166&r2=1.167 http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log http://osvdb.org/36085 http://secunia.com/advisories/26085 http://secunia.com/advisories/26642 http://secunia.com/advisories/27102 http://secunia.com/advisories/30158 http://secunia.com/advisories/30288 http://www.vupen.com/english/advisories/2007/2547 XForce ISS Database: php-glob-security-bypass(35437) https://exchange.xforce.ibmcloud.com/vulnerabilities/35437