Description
Directory traversal vulnerability in PHP before 5.2.4 allows attackers to bypass open_basedir restrictions via unspecified vectors involving the glob function.
References
- GLSA-200710-02 vendor-advisory
- http://www.php.net/ChangeLog-5.php#5.2.4
- https://issues.rpath.com/browse/RPL-1693
- php-glob-security-bypass(36386) vdb-entry
- https://issues.rpath.com/browse/RPL-1702
- 26838 third-party-advisory
- 27377 third-party-advisory
- 27102 third-party-advisory
- ADV-2007-3023 vdb-entry
- http://www.php.net/releases/5_2_4.php
- 26642 third-party-advisory