PT-2007-2765 · Zend · Zend Platform

Published 2007-03-09 · Updated 2017-07-29 · CVE-2007-1370

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Zend Platform versions 2.2.3 and earlier

Description The issue is related to incorrect ownership of certain files, including scd.sh, which allows local users to gain root privileges by modifying these files. This issue only occurs when safe mode and open basedir are disabled.

Recommendations For Zend Platform versions 2.2.3 and earlier, update the ownership of the affected files, including scd.sh, to prevent local users from modifying them and gaining root privileges. Ensure safe mode and open basedir are properly configured to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-1370

Affected Products

Zend Platform

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-1370 · Security Note
• http://zend.com/products/zend_platform/security_vulnerabilities · Vendor Advisory
• http://php-security.org/MOPB/BONUS-06-2007.html · Vendor Advisory
• http://secunia.com/advisories/24501 · Note
• http://securityfocus.com/bid/22801 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32825 · Note
• http://osvdb.org/32772 · Note
• http://vupen.com/english/advisories/2007/0829 · Note