CVE-2007-1835

NONECVSS 0.0

0.0

PHP 4 before 4.4.5 and PHP 5 before 5.2.1, when using an empty session save path (session.save_path), uses the TMPDIR default after checking the restrictions, which allows local users to bypass open_basedir restrictions.

🔗 References (18)

cve@mitrehttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506
cve@mitrehttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137
cve@mitrehttp://secunia.com/advisories/25423
cve@mitrehttp://secunia.com/advisories/25850
cve@mitrehttp://www.php-security.org/MOPB/MOPB-36-2007.html
cve@mitrehttp://www.securityfocus.com/bid/23183
cve@mitrehttp://www.vupen.com/english/advisories/2007/1991
cve@mitrehttp://www.vupen.com/english/advisories/2007/2374
cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/33550
af854a3a-2127-422b-91ae-364da2661108http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506
af854a3a-2127-422b-91ae-364da2661108http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25423
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25850
af854a3a-2127-422b-91ae-364da2661108http://www.php-security.org/MOPB/MOPB-36-2007.html
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/23183

Is Your Infrastructure Affected by CVE-2007-1835?

EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.

Start Free Scan →Browse All CVEs

CVE-2007-1835

📅 Published

🔄 Last Modified

🔗 References (18)

Dependency Blast Radius

Is Your Infrastructure Affected by CVE-2007-1835?