NVD

Id
52672  
Name
CVE-2007-0448  
Description
The fopen function in PHP 5.2.0 does not properly handle invalid URI handlers, which allows context-dependent attackers to bypass safe_mode restrictions and read arbitrary files via a file path specified with an invalid URI, as demonstrated via the srpath URI.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-05-24  
Modified Date
2008-09-10  
Seq
2007-0448  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266074 52672 CVE-2007-0448 20070125 PHP 5.2.0 safe_mode bypass (by Writing Mode)  View
266075 52672 CVE-2007-0448 2175  View
266076 52672 CVE-2007-0448 22261  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54571 JVNDB-2007-003263 PHP の fopen 関数における safe_mode 制限を回避される脆弱性 PHP の fopen 関数は、無効な URI ハンドラを適切に処理しないため、safe_mode 制限を回避される、および任意のファイルを読まれる脆弱性が存在します。 CVE-2007-0448 23803 CVE-2007-0448 52672 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003263.html 2007-05-24 2012-09-25 View