PT-2009-5843 · Php+1 · Php+1

Grzegorz Stachowiak · Publicado 2009-11-23 · Atualizado 2018-10-30 · CVE-2009-3557

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP versions 5.2.11 and earlier PHP versions 5.3.x before 5.3.1

Description The issue allows context-dependent attackers to bypass safe mode restrictions and create files in group-writable or world-writable directories via the dir and prefix arguments in the tempnam function.

Recommendations For PHP versions 5.2.11 and earlier, update to version 5.2.12 or later. For PHP versions 5.3.x before 5.3.1, update to version 5.3.1 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-3557

HPSBUX02543

Produtos afetados

Hp-Ux

Php

Referências · 38

• 🔥 http://securityreason.com/securityalert/6601 · Exploit
• http://bugs.php.net/bug.php?id=48378 · Nota
• http://bugs.php.net/bug.php?id=49026 · Nota
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMjI0NzczOA%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4018 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3557 · Nota
• http://openwall.com/lists/oss-security/2009/11/20/5 · Correção
• http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017 · Nota de Segurança
• http://secunia.com/advisories/40262 · Nota
• http://secunia.com/advisories/37412 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDVSA-2009:303 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3557 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3293 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3292 · Nota de Segurança