PHP <5.2.7 SAPI php_getuid() Safe Mode 限制绕过漏洞

No description provided by source...

CVE-2008-5624: Undefined Security Weakness

PHP 5 before 5.2.7 does not properly initialize the pageuid and pagegid global variables for use by the SAPI phpgetuid function, which allows context-dependent attackers to bypass safemode restrictions via variable settings that are intended to be restricted to root, as demonstrated by a setting ...