Red Hat Bugzilla – Bug 239288
PHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir restrictions via unspecified vectors in the session extension.
Last modified: 2007-11-16 20:14:55 EST
This bug is CVE-2007-0905.
*** This bug has been marked as a duplicate of 240155 ***