PT-2007-2765 · Zend · Zend Platform

Publicado 2007-03-09 · Atualizado 2017-07-29 · CVE-2007-1370

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Média

Vetor base

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Zend Platform versions 2.2.3 and earlier

Description The issue is related to incorrect ownership of certain files, including scd.sh, which allows local users to gain root privileges by modifying these files. This issue only occurs when safe mode and open basedir are disabled.

Recommendations For Zend Platform versions 2.2.3 and earlier, update the ownership of the affected files, including scd.sh, to prevent local users from modifying them and gaining root privileges. Ensure safe mode and open basedir are properly configured to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-1370

Produtos afetados

Zend Platform

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-1370 · Nota de Segurança
• http://zend.com/products/zend_platform/security_vulnerabilities · Aviso do Fabricante
• http://secunia.com/advisories/24501 · Nota
• http://securityfocus.com/bid/22801 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32825 · Nota
• http://osvdb.org/32772 · Nota
• http://php-security.org/MOPB/BONUS-06-2007.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/0829 · Nota