NVD

Id
57926  
Name
CVE-2007-5900  
Description
PHP before 5.2.5 allows local users to bypass protection mechanisms configured through php_admin_value or php_admin_flag in httpd.conf by using ini_set to modify arbitrary configuration variables, a different issue than CVE-2006-4625.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-11-20  
Modified Date
2011-03-07  
Seq
2007-5900  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
296516 57926 CVE-2007-5900 http://bugs.php.net/bug.php?id=41561  View
296517 57926 CVE-2007-5900 1018934  View
296518 57926 CVE-2007-5900 http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0242  View
296519 57926 CVE-2007-5900 http://www.php.net/ChangeLog-5.php#5.2.5  View
296520 57926 CVE-2007-5900 http://www.php.net/releases/5_2_5.php  View
296521 57926 CVE-2007-5900 HPSBUX02332  View
296522 57926 CVE-2007-5900 https://issues.rpath.com/browse/RPL-1943  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52303 JVNDB-2007-000993 PHP における不正な設定をされる問題 PHP には、ini_set() 関数を使用して、httpd.conf 中の php_admin_value 変数や php_admin_flag 変数を上書き可能な問題が存在します。 CVE-2007-5900 29255 CVE-2007-5900 57926 6.9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000993.html 2007-11-20 2008-05-21 View