Description
Directory traversal vulnerability in PHP 5.2.4 and earlier allows attackers to bypass open_basedir restrictions and possibly execute arbitrary code via a .. (dot dot) in the dl function.
References
- http://www.php.net/ChangeLog-5.php#5.2.5
- 20070910 Re: PHP <=5.2.4 open_basedir bypass & code exec & denial of service mailing-list
- 45902 vdb-entry
- SUSE-SA:2008:004 vendor-advisory
- 28658 third-party-advisory
- 3119 third-party-advisory
- GLSA-200710-02 vendor-advisory
- 20070910 /* PHP <=5.2.4 open_basedir bypass & code exec & denial of service errata ... working on windows too .. */ mailing-list
- http://www.php.net/releases/5_2_5.php
- 20070910 PHP <=5.2.4 open_basedir bypass & code exec & denial of service mailing-list
- php-dl-security-bypass(36528) vdb-entry
- 27102 third-party-advisory