PublicDate: 2007-05-17 20:30:00 UTC Candidate: CVE-2007-2748 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2748 Description: The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than CVE-2007-1375. Ubuntu-Description: Notes: kees> Ubuntu (and Debian) were not affected by this CVE. We used kees> a correct fix to CVE-2007-1375, so this CVE was not a problem. Priority: untriaged Discovered-by: Assigned-to: CVSS: Bugs: dapper_php5: released (5.1.2-1ubuntu3.9) edgy_php5: released (5.1.6-1ubuntu2.6) feisty_php5: released (5.2.1-0ubuntu1.4) devel_php5: released (5.2.3-1ubuntu5) upstream_php5: needs-triage