2.1

CVE-2005-3054

fopen_wrappers.c in PHP 4.4.0, and possibly other versions, does not properly restrict access to other directories when the open_basedir directive includes a trailing slash, which allows PHP scripts in one directory to access files in other directories whose names are substrings of the original directory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Php ≫ Php Version4.4.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.43% 0.343
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html
http://www.php.net/release_4_4_1.php
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323585
Patch
Vendor Advisory
http://secunia.com/advisories/17229
http://secunia.com/advisories/17371
http://secunia.com/advisories/17510
http://secunia.com/advisories/17557
http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2005:213
http://www.securityfocus.com/bid/14957
http://www.vupen.com/english/advisories/2005/1862
http://www.vupen.com/english/advisories/2005/2254
https://usn.ubuntu.com/207-1/