PT-2008-4111 · Php+1 · Php+1

Publicado 2008-06-19 · Atualizado 2018-10-11 · CVE-2008-2666

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHP versions 5.2.6 and earlier

Description The issue allows context-dependent attackers to bypass safe mode restrictions. This can be achieved by creating a subdirectory named http: and then placing ../ (dot dot slash) sequences in an http URL argument to the (1) chdir or (2) ftok function.

Recommendations For PHP versions 5.2.6 and earlier, consider restricting access to the chdir and ftok functions as a temporary workaround until a patch is available. Additionally, avoid using ../ (dot dot slash) sequences in http URL arguments to minimize the risk of exploitation.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-2666

HPSBUX02431

HPSBUX02465

Produtos afetados

Hp-Ux

Php

Referências · 59

• 🔥 https://exploit-db.com/exploits/31937 · Exploit
• http://securityreason.com/securityalert/3942 · Nota
• http://vupen.com/english/advisories/2009/1297 · Nota
• http://securityreason.com/securityalert/1294 · Nota
• http://securityreason.com/achievement_securityalert/54 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6203 · Nota de Segurança
• http://xforce.iss.net/xforce/xfdb/43198 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3658 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=125631037611762&w=2 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3660 · Nota de Segurança
• http://securityreason.com/achievement_securityalert/59 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3659 · Nota de Segurança
• http://secunia.com/advisories/35074 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2939 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2168 · Nota de Segurança