6.8

CVE-2007-2519

Exploit

Directory traversal vulnerability in the installer in PEAR 1.0 through 1.5.3 allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in the (1) install-as attribute in the file element in package.xml 1.0 or the (2) as attribute in the install element in package.xml 2.0.  NOTE: it could be argued that this does not cross privilege boundaries in typical installations, since the code being installed could perform the same actions.

Data is provided by the National Vulnerability Database (NVD)
Php Group ≫ Pear Version1.0
Php Group ≫ Pear Version1.0.1
Php Group ≫ Pear Version1.1
Php Group ≫ Pear Version1.2
Php Group ≫ Pear Version1.2.1
Php Group ≫ Pear Version1.2b1
Php Group ≫ Pear Version1.2b2
Php Group ≫ Pear Version1.2b3
Php Group ≫ Pear Version1.2b4
Php Group ≫ Pear Version1.2b5
Php Group ≫ Pear Version1.3
Php Group ≫ Pear Version1.3.1
Php Group ≫ Pear Version1.3.3
Php Group ≫ Pear Version1.3.3.1
Php Group ≫ Pear Version1.3.4
Php Group ≫ Pear Version1.3.5
Php Group ≫ Pear Version1.3.6
Php Group ≫ Pear Version1.3b1
Php Group ≫ Pear Version1.3b2
Php Group ≫ Pear Version1.3b3
Php Group ≫ Pear Version1.3b5
Php Group ≫ Pear Version1.3b6
Php Group ≫ Pear Version1.4.0
Php Group ≫ Pear Version1.4.0a1
Php Group ≫ Pear Version1.4.0a2
Php Group ≫ Pear Version1.4.0a3
Php Group ≫ Pear Version1.4.0a4
Php Group ≫ Pear Version1.4.0a5
Php Group ≫ Pear Version1.4.0a6
Php Group ≫ Pear Version1.4.0a7
Php Group ≫ Pear Version1.4.0a8
Php Group ≫ Pear Version1.4.0a9
Php Group ≫ Pear Version1.4.0a10
Php Group ≫ Pear Version1.4.0a11
Php Group ≫ Pear Version1.4.0a12
Php Group ≫ Pear Version1.4.0b1
Php Group ≫ Pear Version1.4.0b2
Php Group ≫ Pear Version1.4.0rc1
Php Group ≫ Pear Version1.4.0rc2
Php Group ≫ Pear Version1.4.1
Php Group ≫ Pear Version1.4.2
Php Group ≫ Pear Version1.4.3
Php Group ≫ Pear Version1.4.4
Php Group ≫ Pear Version1.4.5
Php Group ≫ Pear Version1.4.6
Php Group ≫ Pear Version1.4.7
Php Group ≫ Pear Version1.4.8
Php Group ≫ Pear Version1.4.9
Php Group ≫ Pear Version1.4.10
Php Group ≫ Pear Version1.4.10rc1
Php Group ≫ Pear Version1.4.11
Php Group ≫ Pear Version1.5.0
Php Group ≫ Pear Version1.5.0a1
Php Group ≫ Pear Version1.5.0rc1
Php Group ≫ Pear Version1.5.0rc2
Php Group ≫ Pear Version1.5.0rc3
Php Group ≫ Pear Version1.5.1
Php Group ≫ Pear Version1.5.2
Php Group ≫ Pear Version1.5.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.38% 0.869
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
http://pear.php.net/advisory-20070507.txt
Patch
Vendor Advisory
Exploit