NVD

Id
56961  
Name
CVE-2007-4850  
Description
curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context-dependent attackers to bypass safe_mode and open_basedir restrictions and read arbitrary files via a file:// request containing a x00 sequence, a different vulnerability than CVE-2006-2563.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2008-01-24  
Modified Date
2011-03-07  
Seq
2007-4850  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
290732 56961 CVE-2007-4850 http://cvs.php.net/viewcvs.cgi/php-src/NEWS?revision=1.2027.2.547.2.1047&view=markup  View
290733 56961 CVE-2007-4850 APPLE-SA-2008-07-31  View
290734 56961 CVE-2007-4850 APPLE-SA-2008-10-09  View
290735 56961 CVE-2007-4850 20080122 PHP 5.2.5 cURL safe_mode bypass  View
290736 56961 CVE-2007-4850 20080122 PHP 5.2.5 cURL safe_mode bypass  View
290737 56961 CVE-2007-4850 3562  View
290738 56961 CVE-2007-4850 http://support.apple.com/kb/HT3216  View
290739 56961 CVE-2007-4850 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0178  View
290740 56961 CVE-2007-4850 MDVSA-2009:022  View
290741 56961 CVE-2007-4850 MDVSA-2009:023  View
290742 56961 CVE-2007-4850 [oss-security] 20080502 CVE Request (PHP)  View
290743 56961 CVE-2007-4850 http://www.php.net/ChangeLog-5.php  View
290744 56961 CVE-2007-4850 20080122 PHP 5.2.5 cURL safe_mode bypass  View
290745 56961 CVE-2007-4850 20080527 rPSA-2008-0178-1 php php-mysql php-pgsql  View
290746 56961 CVE-2007-4850 27413  View
290747 56961 CVE-2007-4850 29009  View
290748 56961 CVE-2007-4850 31681  View
290749 56961 CVE-2007-4850 USN-628-1  View
290750 56961 CVE-2007-4850 ADV-2008-1412  View
290751 56961 CVE-2007-4850 ADV-2008-2268  View
290752 56961 CVE-2007-4850 ADV-2008-2780  View
290753 56961 CVE-2007-4850 php-curlinit-security-bypass(39852)  View
290754 56961 CVE-2007-4850 php-safemode-directive-security-bypass(42134)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46292 JVNDB-2008-001602 PHP の cURL ライブラリにおける任意のファイルを読み取られる脆弱性 PHP の cURL ライブラリの curl/interface.c には、safe_mode および open_basedir 制限を回避され、任意のファイルを読み取られる脆弱性が存在します。 CVE-2007-4850 28205 CVE-2007-4850 56961 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001602.html 2008-08-03 2009-02-24 View