Description
PHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir restrictions via unspecified vectors in the session extension. NOTE: it is possible that this issue is a duplicate of CVE-2006-6383.
References
- 2007-0009 vendor-advisory
- OpenPKG-SA-2007.010 vendor-advisory
- 22496 vdb-entry
- 32768 vdb-entry
- http://www.php.net/releases/5_2_1.php
- 24089 third-party-advisory
- 24419 third-party-advisory
- http://www.php.net/ChangeLog-5.php#5.2.1
- ADV-2007-0546 vdb-entry