NVD

Id
53554  
Name
CVE-2007-1369  
Description
ini_modifier (sgid-zendtech) in Zend Platform 2.2.3 and earlier allows local users to modify the system php.ini file by editing a copy of php.ini file using the -f parameter, and then performing a symlink attack using the directory that contains the attacker-controlled php.ini file, and linking this directory to /usr/local/Zend/etc.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-03-09  
Modified Date
2011-03-07  
Seq
2007-1369  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
271378 53554 CVE-2007-1369 http://www.php-security.org/MOPB/BONUS-07-2007.html  View
271379 53554 CVE-2007-1369 22802  View
271380 53554 CVE-2007-1369 ADV-2007-0829  View
271381 53554 CVE-2007-1369 http://www.zend.com/products/zend_platform/security_vulnerabilities  View
271382 53554 CVE-2007-1369 zend-inimodifier-privilege-escalation(32820)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56531 JVNDB-2007-005223 Zend Platform の ini_modifier における system.ini ファイルを変更される脆弱性 Zend Platform の ini_modifier (sgid-zendtech) には、system.ini ファイルを変更される脆弱性が存在します。 CVE-2007-1369 24724 CVE-2007-1369 53554 4.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005223.html 2007-03-09 2012-12-20 View