Mandriva Linux Security Advisory – Daniel Papasian discovered a stack-based buffer overflow in the apc_search_paths() function in APC that can be triggered when processing long filenames. A remote attacker could exploit this vulnerability to execute arbitrary code in PHP applications that pass user-controlled input to the include() function.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/65400/MDVSA-2008-082.txt
Source: https://packetstormsecurity.com/files/65400/Mandriva-Linux-Security-Advisory-2008-082.html