NVD

Id
2564  
Name
CVE-2008-2666  
Description
Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow context-dependent attackers to bypass safe_mode restrictions by creating a subdirectory named http: and then placing ../ (dot dot slash) sequences in an http URL argument to the (1) chdir or (2) ftok function.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-06-19  
Modified Date
2012-10-30  
Seq
2008-2666  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
16165 2564 CVE-2008-2666 APPLE-SA-2009-05-12  View
16166 2564 CVE-2008-2666 HPSBUX02431  View
16167 2564 CVE-2008-2666 HPSBUX02465  View
16168 2564 CVE-2008-2666 GLSA-200811-05  View
16169 2564 CVE-2008-2666 20080617 PHP 5.2.6 chdir(),ftok() (standard ext) safe_mode bypass  View
16170 2564 CVE-2008-2666 3942  View
16171 2564 CVE-2008-2666 http://support.apple.com/kb/HT3549  View
16172 2564 CVE-2008-2666 http://wiki.rpath.com/Advisories:rPSA-2009-0035  View
16173 2564 CVE-2008-2666 20090302 rPSA-2009-0035-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl  View
16174 2564 CVE-2008-2666 29796  View
16175 2564 CVE-2008-2666 1020328  View
16176 2564 CVE-2008-2666 TA09-133A  View
16177 2564 CVE-2008-2666 ADV-2009-1297  View
16178 2564 CVE-2008-2666 php-chdir-ftoc-security-bypass(43198)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46857 JVNDB-2008-002167 PHP の chdir 関数および ftok 関数におけるディレクトリトラバーサルの脆弱性 PHP には、chdir 関数および ftok 関数において、http URL 内の "../" の処理に不備があるため、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-2666 32779 CVE-2008-2666 2564 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002167.html 2008-06-20 2009-11-16 View