CVE-2008-1488

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-03-24 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 through 3.0.16 allows remote attackers to execute arbitrary code via a long filename.

Affected products

Pecl-Php Alternative Php Cache: 3.0.11, 3.0.12, 3.0.12p1, 3.0.12p2, 3.0.13, 3.0.14 (+2)

References

http://papasian.org/~dannyp/apcsmash.php.txt
http://pecl.php.net/bugs/bug.php?id=13415
http://secunia.com/advisories/29509
http://secunia.com/advisories/29745
http://secunia.com/advisories/31082
http://security.gentoo.org/glsa/glsa-200804-07.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2008:082
http://www.securityfocus.com/bid/28457
https://exchange.xforce.ibmcloud.com/vulnerabilities/41420
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00548.html
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00582.html
http://papasian.org/~dannyp/apcsmash.php.txt

Get alerted when CVE-2008-1488 or the next vulnerability affects your stack