php: pcntl_exec() accepts paths with NUL character

It was found that certain PHP functions did not properly handle file names containing a NULL character. A remote attacker could possibly use this flaw to make a PHP script access unexpected files and bypass intended file system access restrictions...

PT-2015-3431

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.41 PHP versions 5.5.x prior to 5.5.25 PHP versions 5.6.x prior to 5.6.9 Description The issue is related to the pcntl exec implementation in PHP, which incorrectly handles pathnames containing a x00 character. This...