CVE

Id
24818  
CVE No.
CVE-2007-1461  
Status
Candidate  
Description
The compress.bzip2:// URL wrapper provided by the bz2 extension in PHP before 4.4.7, and 5.x before 5.2.2, does not implement safemode or open_basedir checks, which allows remote attackers to read bzip2 archives located outside of the intended directories.  
Phase
Assigned (20070314)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
245765 24818 CVE-2007-1461 MISC:http://www.php-security.org/MOPB/MOPB-21-2007.html  View
245766 24818 CVE-2007-1461 CONFIRM:http://us2.php.net/releases/4_4_7.php  View
245767 24818 CVE-2007-1461 CONFIRM:http://us2.php.net/releases/5_2_2.php  View
245768 24818 CVE-2007-1461 CONFIRM:http://docs.info.apple.com/article.html?artnum=306172  View
245769 24818 CVE-2007-1461 APPLE:APPLE-SA-2007-07-31  View
245770 24818 CVE-2007-1461 URL:http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html  View
245771 24818 CVE-2007-1461 SUSE:SUSE-SA:2007:032  View
245772 24818 CVE-2007-1461 URL:http://www.novell.com/linux/security/advisories/2007_32_php.html  View
245773 24818 CVE-2007-1461 BID:22954  View
245774 24818 CVE-2007-1461 URL:http://www.securityfocus.com/bid/22954  View
245775 24818 CVE-2007-1461 BID:25159  View
245776 24818 CVE-2007-1461 URL:http://www.securityfocus.com/bid/25159  View
245777 24818 CVE-2007-1461 VUPEN:ADV-2007-2732  View
245778 24818 CVE-2007-1461 URL:http://www.vupen.com/english/advisories/2007/2732  View
245779 24818 CVE-2007-1461 SECUNIA:25056  View
245780 24818 CVE-2007-1461 URL:http://secunia.com/advisories/25056  View
245781 24818 CVE-2007-1461 SECUNIA:26235  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54821 JVNDB-2007-003513 Inkscape におけるフォーマットストリングの脆弱性 Inkscape には、フォーマットストリングの脆弱性が存在します。 CVE-2007-1463 24818 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003513.html  View