CVE

Id
14260  
CVE No.
CVE-2005-3054  
Status
Candidate  
Description
fopen_wrappers.c in PHP 4.4.0, and possibly other versions, does not properly restrict access to other directories when the open_basedir directive includes a trailing slash, which allows PHP scripts in one directory to access files in other directories whose names are substrings of the original directory.  
Phase
Assigned (20050926)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
106042 14260 CVE-2005-3054 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=323585  View
106043 14260 CVE-2005-3054 CONFIRM:http://www.php.net/release_4_4_1.php  View
106044 14260 CVE-2005-3054 GENTOO:GLSA-200511-08  View
106045 14260 CVE-2005-3054 URL:http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml  View
106046 14260 CVE-2005-3054 MANDRIVA:MDKSA-2005:213  View
106047 14260 CVE-2005-3054 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:213  View
106048 14260 CVE-2005-3054 TRUSTIX:TSLSA-2005-0059  View
106049 14260 CVE-2005-3054 URL:http://lists.trustix.org/pipermail/tsl-announce/2005-October/000354.html  View
106050 14260 CVE-2005-3054 UBUNTU:USN-207-1  View
106051 14260 CVE-2005-3054 URL:http://www.ubuntulinux.org/support/documentation/usn/usn-207-1  View
106052 14260 CVE-2005-3054 BID:14957  View
106053 14260 CVE-2005-3054 URL:http://www.securityfocus.com/bid/14957  View
106054 14260 CVE-2005-3054 VUPEN:ADV-2005-1862  View
106055 14260 CVE-2005-3054 URL:http://www.vupen.com/english/advisories/2005/1862  View
106056 14260 CVE-2005-3054 VUPEN:ADV-2005-2254  View
106057 14260 CVE-2005-3054 URL:http://www.vupen.com/english/advisories/2005/2254  View
106058 14260 CVE-2005-3054 SECUNIA:17371  View
106059 14260 CVE-2005-3054 URL:http://secunia.com/advisories/17371  View
106060 14260 CVE-2005-3054 SECUNIA:17229  View
106061 14260 CVE-2005-3054 URL:http://secunia.com/advisories/17229  View
106062 14260 CVE-2005-3054 SECUNIA:17510  View
106063 14260 CVE-2005-3054 URL:http://secunia.com/advisories/17510  View
106064 14260 CVE-2005-3054 SECUNIA:17557  View

Related JVN