CVE

Id
28182  
CVE No.
CVE-2007-4825  
Status
Candidate  
Description
Directory traversal vulnerability in PHP 5.2.4 and earlier allows attackers to bypass open_basedir restrictions and possibly execute arbitrary code via a .. (dot dot) in the dl function.  
Phase
Assigned (20070911)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
292395 28182 CVE-2007-4825 BUGTRAQ:20070910 /* PHP <=5.2.4 open_basedir bypass & code exec & denial of service errata ... working on windows too .. */  View
292396 28182 CVE-2007-4825 URL:http://www.securityfocus.com/archive/1/archive/1/478988/100/0/threaded  View
292397 28182 CVE-2007-4825 BUGTRAQ:20070910 PHP <=5.2.4 open_basedir bypass & code exec & denial of service  View
292398 28182 CVE-2007-4825 URL:http://www.securityfocus.com/archive/1/archive/1/478985/100/0/threaded  View
292399 28182 CVE-2007-4825 BUGTRAQ:20070910 Re: PHP <=5.2.4 open_basedir bypass & code exec & denial of service  View
292400 28182 CVE-2007-4825 URL:http://www.securityfocus.com/archive/1/archive/1/478989/100/0/threaded  View
292401 28182 CVE-2007-4825 CONFIRM:http://www.php.net/ChangeLog-5.php#5.2.5  View
292402 28182 CVE-2007-4825 CONFIRM:http://www.php.net/releases/5_2_5.php  View
292403 28182 CVE-2007-4825 GENTOO:GLSA-200710-02  View
292404 28182 CVE-2007-4825 URL:http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml  View
292405 28182 CVE-2007-4825 SUSE:SUSE-SA:2008:004  View
292406 28182 CVE-2007-4825 URL:http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html  View
292407 28182 CVE-2007-4825 OSVDB:45902  View
292408 28182 CVE-2007-4825 URL:http://osvdb.org/45902  View
292409 28182 CVE-2007-4825 SECUNIA:27102  View
292410 28182 CVE-2007-4825 URL:http://secunia.com/advisories/27102  View
292411 28182 CVE-2007-4825 SECUNIA:28658  View
292412 28182 CVE-2007-4825 URL:http://secunia.com/advisories/28658  View
292413 28182 CVE-2007-4825 SREASON:3119  View
292414 28182 CVE-2007-4825 URL:http://securityreason.com/securityalert/3119  View
292415 28182 CVE-2007-4825 XF:php-dl-security-bypass(36528)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46603 JVNDB-2008-001913 Automated Solutions Modbus Slave ActiveX Control における脆弱性 Automated Solutions Modbus Slave ActiveX Control には、任意のコードを実行されたり、サービス運用妨害（DoS）攻撃を受ける脆弱性が存在します。 CVE-2007-4827 28182 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001913.html  View