CVE-2007-0905

2007-02-1323:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-0905

php

safe_mode

open_basedir

session extension security

6.2 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.037 Low

EPSS

Percentile

91.6%

JSON

PHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir restrictions via unspecified vectors in the session extension. NOTE: it is possible that this issue is a duplicate of CVE-2006-6383.

CPENameOperatorVersion
php:phpphpeq4.3.9
php:phpphpeq3.0
php:phpphpeq3.0.5
php:phpphpeq3.0.11
php:phpphpeq5.1.5
php:phpphpeq5.1.2
php:phpphpeq4.2.0
php:phpphpeq5.1.1
php:phpphpeq3.0.1
php:phpphpeq3.0.2

CPE	Name	Operator	Version
php:php	php	eq	4.3.9
php:php	php	eq	3.0
php:php	php	eq	3.0.5
php:php	php	eq	3.0.11
php:php	php	eq	5.1.5
php:php	php	eq	5.1.2
php:php	php	eq	4.2.0
php:php	php	eq	5.1.1
php:php	php	eq	3.0.1
php:php	php	eq	3.0.2