NVD

Id
2563  
Name
CVE-2008-2665  
Description
Directory traversal vulnerability in the posix_access function in PHP 5.2.6 and earlier allows remote attackers to bypass safe_mode restrictions via a .. (dot dot) in an http URL, which results in the URL being canonicalized to a local filename after the safe_mode check has successfully run.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-06-19  
Modified Date
2012-10-30  
Seq
2008-2665  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
16151 2563 CVE-2008-2665 APPLE-SA-2009-05-12  View
16152 2563 CVE-2008-2665 HPSBUX02431  View
16153 2563 CVE-2008-2665 HPSBUX02465  View
16154 2563 CVE-2008-2665 GLSA-200811-05  View
16155 2563 CVE-2008-2665 20080617 PHP 5.2.6 posix_access() (posix ext) safe_mode bypass  View
16156 2563 CVE-2008-2665 3941  View
16157 2563 CVE-2008-2665 http://support.apple.com/kb/HT3549  View
16158 2563 CVE-2008-2665 http://wiki.rpath.com/Advisories:rPSA-2009-0035  View
16159 2563 CVE-2008-2665 20090302 rPSA-2009-0035-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl  View
16160 2563 CVE-2008-2665 29797  View
16161 2563 CVE-2008-2665 1020327  View
16162 2563 CVE-2008-2665 TA09-133A  View
16163 2563 CVE-2008-2665 ADV-2009-1297  View
16164 2563 CVE-2008-2665 php-posixaccess-security-bypass(43196)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46856 JVNDB-2008-002166 PHP の posix_access 関数におけるディレクトリトラバーサルの脆弱性 PHP の posix_access 関数には、http URL 中にある ".." の処理に不備があるため、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-2665 32778 CVE-2008-2665 2563 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002166.html 2008-06-20 2009-11-16 View