PHP 5.2.9 (Windows x86) - Local Safemod Bypass

Abysssec Inc Public Advisory


Title  : PHP <= 5.2.9 SafeMod Bypass Vulnerability 
Affected Version : Tested on 5.2.8, 5.2.6 but previous versions maybe be afftect
Vendor  Site   : www.php.net

Vulnerability Discoverd by   : www.abysssec.com


Description : 

Here is another safemod bypass vulnerability exist in php <= 5.2.9 on windows .
the problem comes from OS behavior - implement  and interfacing between php
and operation systems directory structure . the problem is php won't tell difference 
between directory browsing in linux and windows this can lead attacker to ability 
execute his / her commindows this can lead attacker to ability 
execute his / her commindows this can lead attacker to ability 
execute his / her commindows this can lead attacker to ability 
execute his / her commindows this can lead attacker to ability 
execute his / her commindows this can lead attacker to ability 
execute his / her commindows this can lead attacker to ability 
execute his / her commindows this can lead attacker to ability 
execute his / her commindows this can lead attacker to ability 
execute his / her commindows this can lead attacker to ability 
execute his / her commindows this can lead attacker to ability 
execute his / her commindows this can lead attacker to ability 
execute his / her commindows this can lead attacker to ability 
execute his / her commindows this can lead attacker to ability 
execute his / her commindows this can lead attacker to ability 
execute his / her commindows this can lead attacker to ability 
execute his / her commindows this can lead