NVD

Id
12663  
Name
CVE-2010-1129  
Description
The safe_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / (slash) character, which allows context-dependent attackers to bypass intended access restrictions via vectors related to use of the tempnam function.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-03-26  
Modified Date
2010-08-31  
Seq
2010-1129  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
69492 12663 CVE-2010-1129 HPSBMA02554  View
69493 12663 CVE-2010-1129 APPLE-SA-2010-08-24-1  View
69494 12663 CVE-2010-1129 1023661  View
69495 12663 CVE-2010-1129 http://support.apple.com/kb/HT4312  View
69496 12663 CVE-2010-1129 http://www.php.net/ChangeLog-5.php  View
69497 12663 CVE-2010-1129 http://www.php.net/releases/5_2_13.php  View
69498 12663 CVE-2010-1129 38431  View
69499 12663 CVE-2010-1129 ADV-2010-0479  View
69500 12663 CVE-2010-1129 ADV-2010-1796  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35454 JVNDB-2010-001234 PHP の safe_mode 実装におけるアクセス制限を回避される脆弱性 PHP の safe_mode 実装には、/ (スラッシュ) 文字で終了していないディレクトリパス名を適切に処理できないため、アクセス制限を回避される脆弱性が存在します。 CVE-2010-1129 43709 CVE-2010-1129 12663 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001234.html 2010-03-26 2010-09-08 View