CVE-2008-5624
HIGH
7.5
CVSS 2.0
Description
PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as demonstrated by a setting of /etc for the error_log variable.
Affected products and versions
- PHP versions 5.0.0, 5.0.0beta1, 5.0.0beta2, 5.0.0beta3, 5.0.0beta4, 5.0.0rc1, 5.0.0rc2, 5.0.0rc3, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.1.0, 5.1.1, 5.1.2, 5.1.3, 5.1.4, 5.1.5, 5.1.6, 5.2.0, 5.2.1, 5.2.2, 5.2.3, 5.2.4, 5.2.5, 5.2.6, 5.2.7
References
- marc.info http://marc.info/?l=bugtraq&m=124654546101607&w=2
- marc.info http://marc.info/?l=bugtraq&m=125631037611762&w=2
- osvdb.org http://osvdb.org/50483
- osvdb.org http://osvdb.org/52207
- secunia.com http://secunia.com/advisories/35003
- secunia.com http://secunia.com/advisories/35650
- securityreason.com http://securityreason.com/achievement_securityalert/59 Exploit
- wiki.rpath.com http://wiki.rpath.com/Advisories:rPSA-2009-0035
- www.debian.org http://www.debian.org/security/2009/dsa-1789
- www.mandriva.com http://www.mandriva.com/security/advisories?name=MDVSA-2009:045
- www.php.net http://www.php.net/ChangeLog-5.php#5.2.7
- www.securityfocus.com http://www.securityfocus.com/archive/1/498985/100/0/threaded
- www.securityfocus.com http://www.securityfocus.com/archive/1/501376/100/0/threaded
- www.securityfocus.com http://www.securityfocus.com/bid/32688
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/47318
- nvd.nist.gov Official NVD record