CVE

Id
24727  
CVE No.
CVE-2007-1370  
Status
Candidate  
Description
Zend Platform 2.2.3 and earlier has incorrect ownership for scd.sh and certain other files, which allows local users to gain root privileges by modifying the files. NOTE: this only occurs when safe_mode and open_basedir are disabled; other settings require leverage for other vulnerabilities.  
Phase
Assigned (20070309)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
244737 24727 CVE-2007-1370 MISC:http://www.php-security.org/MOPB/BONUS-06-2007.html  View
244738 24727 CVE-2007-1370 CONFIRM:http://www.zend.com/products/zend_platform/security_vulnerabilities  View
244739 24727 CVE-2007-1370 BID:22801  View
244740 24727 CVE-2007-1370 URL:http://www.securityfocus.com/bid/22801  View
244741 24727 CVE-2007-1370 VUPEN:ADV-2007-0829  View
244742 24727 CVE-2007-1370 URL:http://www.vupen.com/english/advisories/2007/0829  View
244743 24727 CVE-2007-1370 OSVDB:32772  View
244744 24727 CVE-2007-1370 URL:http://www.osvdb.org/32772  View
244745 24727 CVE-2007-1370 SECUNIA:24501  View
244746 24727 CVE-2007-1370 URL:http://secunia.com/advisories/24501  View
244747 24727 CVE-2007-1370 XF:zend-scd-privilege-escalation(32825)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56534 JVNDB-2007-005226 PHP-Nuke 用の PostGuestbook モジュールにおける PHP リモートファイルインクルージョンの脆弱性 PHP-Nuke 用の PostGuestbook モジュールの styles/internal/header.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-1372 24727 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005226.html  View