CVE

Id
26364  
CVE No.
CVE-2007-3007  
Status
Candidate  
Description
PHP 5 before 5.2.3 does not enforce the open_basedir or safe_mode restriction in certain cases, which allows context-dependent attackers to determine the existence of arbitrary files by checking if the readfile function returns a string. NOTE: this issue might also involve the realpath function.  
Phase
Assigned (20070604)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
267003 26364 CVE-2007-3007 CONFIRM:http://bugs.php.net/bug.php?id=41492  View
267004 26364 CVE-2007-3007 CONFIRM:http://www.php.net/releases/5_2_3.php  View
267005 26364 CVE-2007-3007 FEDORA:FEDORA-2007-2215  View
267006 26364 CVE-2007-3007 URL:https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00397.html  View
267007 26364 CVE-2007-3007 GENTOO:GLSA-200710-02  View
267008 26364 CVE-2007-3007 URL:http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml  View
267009 26364 CVE-2007-3007 SUSE:SUSE-SA:2007:044  View
267010 26364 CVE-2007-3007 URL:http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html  View
267011 26364 CVE-2007-3007 TRUSTIX:2007-0023  View
267012 26364 CVE-2007-3007 URL:http://www.trustix.org/errata/2007/0023/  View
267013 26364 CVE-2007-3007 BID:24259  View
267014 26364 CVE-2007-3007 URL:http://www.securityfocus.com/bid/24259  View
267015 26364 CVE-2007-3007 OSVDB:36084  View
267016 26364 CVE-2007-3007 URL:http://osvdb.org/36084  View
267017 26364 CVE-2007-3007 SECUNIA:25456  View
267018 26364 CVE-2007-3007 URL:http://secunia.com/advisories/25456  View
267019 26364 CVE-2007-3007 SECUNIA:26048  View
267020 26364 CVE-2007-3007 URL:http://secunia.com/advisories/26048  View
267021 26364 CVE-2007-3007 SECUNIA:26231  View
267022 26364 CVE-2007-3007 URL:http://secunia.com/advisories/26231  View
267023 26364 CVE-2007-3007 SECUNIA:27110  View
267024 26364 CVE-2007-3007 URL:http://secunia.com/advisories/27110  View
267025 26364 CVE-2007-3007 SECUNIA:27102  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55256 JVNDB-2007-003948 Mbedthis AppWeb の MprLogToFile::logEvent 関数におけるフォーマットストリングの脆弱性 Mbedthis AppWeb の MprLogToFile::logEvent 関数には、ビルドがログ機能をサポートしているが設定でログ機能が無効になっている際、フォーマットストリングの脆弱性が存在します。 CVE-2007-3009 26364 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003948.html  View