Bug 239288 - PHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir restrictions via unspecified vectors in the session extension.
Summary: PHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir restri...
Keywords:
Status: CLOSED DUPLICATE of bug 240155
Alias: None
Product: Red Hat Enterprise Linux 4
Classification: Red Hat
Component: php
Version: 4.5
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
: ---
Assignee: Joe Orton
QA Contact: David Lawrence
URL: http://cve.mitre.org/cgi-bin/cvename....
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2007-05-07 13:17 UTC by paul boin
Modified: 2007-11-17 01:14 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2007-05-15 15:27:29 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)

Description paul boin 2007-05-07 13:17:24 UTC 
* CONFIRM:http://www.php.net/ChangeLog-5.php#5.2.1
    * CONFIRM:http://www.php.net/releases/5_2_1.php
    * OPENPKG:OpenPKG-SA-2007.010
    * URL:http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html
    * BID:22496
    * URL:http://www.securityfocus.com/bid/22496
    * FRSIRT:ADV-2007-0546
    * URL:http://www.frsirt.com/english/advisories/2007/0546
    * SECUNIA:24089
    * URL:http://secunia.com/advisories/24089
Comment 1 paul boin 2007-05-07 13:18:23 UTC 
This bug is CVE-2007-0905.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0905
Comment 2 Joe Orton 2007-05-15 15:27:29 UTC 

*** This bug has been marked as a duplicate of 240155 ***
Note You need to log in before you can comment on or make changes to this bug.