NVD

Id
12664  
Name
CVE-2010-1130  
Description
session.c in the session extension in PHP before 5.2.13, and 5.3.1, does not properly interpret ; (semicolon) characters in the argument to the session_save_path function, which allows context-dependent attackers to bypass open_basedir and safe_mode restrictions via an argument that contains multiple ; characters in conjunction with a .. (dot dot).  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-03-26  
Modified Date
2010-06-08  
Seq
2010-1130  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
69501 12664 CVE-2010-1130 20100211 PHP 5.2.12/5.3.1 session.save_path safe_mode and open_basedir bypass  View
69502 12664 CVE-2010-1130 7008  View
69503 12664 CVE-2010-1130 1023661  View
69504 12664 CVE-2010-1130 http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/session/session.c?r1=293036&r2=294272  View
69505 12664 CVE-2010-1130 http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/session/session.c?view=log  View
69506 12664 CVE-2010-1130 http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/session/session.c?r1=293036&r2=294272  View
69507 12664 CVE-2010-1130 http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/session/session.c?view=log  View
69508 12664 CVE-2010-1130 http://www.php.net/ChangeLog-5.php  View
69509 12664 CVE-2010-1130 http://www.php.net/releases/5_2_13.php  View
69510 12664 CVE-2010-1130 ADV-2010-0479  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35455 JVNDB-2010-001235 PHP の セッション拡張子における open_basedir または safe_mode 制限を回避される脆弱性 PHP の セッション拡張子における session.c には、session_save_path 関数の引数の ; (セミコロン) 文字を適切に処理できないため、open_basedir または safe_mode 制限を回避される脆弱性が存在します。 CVE-2010-1130 43710 CVE-2010-1130 12664 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001235.html 2010-03-26 2010-04-12 View