Description
Unspecified vulnerability in glob in PHP before 4.4.8, when open_basedir is enabled, has unknown impact and attack vectors. NOTE: this issue reportedly exists because of a regression related to CVE-2007-4663.
References
- ADV-2008-0059 vdb-entry
- http://www.php.net/releases/4_4_8.php
- SSA:2008-045-03 vendor-advisory
- 28936 third-party-advisory
- http://bugs.php.net/bug.php?id=41655
- http://www.php.net/ChangeLog-4.php
- 28318 third-party-advisory
- php-glob-openbasedir-security-bypass(39401) vdb-entry