NVD

Id
53645  
Name
CVE-2007-1461  
Description
The compress.bzip2:// URL wrapper provided by the bz2 extension in PHP before 4.4.7, and 5.x before 5.2.2, does not implement safemode or open_basedir checks, which allows remote attackers to read bzip2 archives located outside of the intended directories.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-03-14  
Modified Date
2011-07-13  
Seq
2007-1461  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
271784 53645 CVE-2007-1461 http://docs.info.apple.com/article.html?artnum=306172  View
271785 53645 CVE-2007-1461 APPLE-SA-2007-07-31  View
271786 53645 CVE-2007-1461 http://us2.php.net/releases/4_4_7.php  View
271787 53645 CVE-2007-1461 http://us2.php.net/releases/5_2_2.php  View
271788 53645 CVE-2007-1461 SUSE-SA:2007:032  View
271789 53645 CVE-2007-1461 http://www.php-security.org/MOPB/MOPB-21-2007.html  View
271790 53645 CVE-2007-1461 22954  View
271791 53645 CVE-2007-1461 25159  View
271792 53645 CVE-2007-1461 ADV-2007-2732  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51681 JVNDB-2007-000344 PHP の bzip2:// ラッパーにおける safe_mode/open_basedir 制限回避の脆弱性 PHP の bz2 拡張モジュールで定義される bzip2:// ラッパーは、safe_mode および open_basedir のチェックを行わない問題があります。 CVE-2007-1461 24816 CVE-2007-1461 53645 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000344.html 2007-03-13 2007-05-25 View