71 matches found
CVE-2009-4018
The procopen function in ext/standard/procopen.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does not enforce the 1 safemodeallowedenvvars and 2 safemodeprotectedenvvars directives, which allows context-dependent attackers to execute programs with an arbitrary environment via the env parameter, a...
CVE-2009-4018
CVE-2009-4018 affects PHP before 5.2.11 and 5.3.x before 5.3.1, where proc_open in ext/standard/proc_open.c fails to enforce safe_mode_allowed_env_vars and safe_mode_protected_env_vars. This lets context-dependent attackers supply an arbitrary environment via the env parameter, demonstrated by cr...
USN-862-1: PHP vulnerabilities
Maksymilian Arciemowicz discovered that PHP did not properly validate arguments to the dbareplace function. If a script passed untrusted input to the dbareplace function, an attacker could truncate the database. This issue only applied to Ubuntu 6.06 LTS, 8.04 LTS, and 8.10. CVE-2008-7068 It was...
PHP 5.3.x < 5.3.1 Multiple Vulnerabilities
Binary data 5242.prm...
CVE-2009-4018
The procopen function in ext/standard/procopen.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does not enforce the 1 safemodeallowedenvvars and 2 safemodeprotectedenvvars directives, which allows context-dependent attackers to execute programs with an arbitrary environment via the env parameter, a...
PHP safe_mode bypass via proc_open() and custom environment
No description provided by source. ----------------------------------------------------------------------- + safe-bypass-procopen.txt - yet another way to bypass PHP safemode. + + By Milen Rangelov [email protected] + ----------------------------------------------------------------------- This...
PHP proc_open() safe_mode bypass
It's possible to execute any code from shared library via procopen...
PHP safe_mode bypass via proc_open() and custom environment
Exploit for linux platform in category local exploits =========================================================== PHP safemode bypass via procopen and custom environment ===========================================================...
PHP safe_mode can be bypassed via proc_open() and custom environment.
This should work provided that you have met the following requirements: 1 A writable directory under documentroot to place those files obviously 2 You don't have procopen in your disabledfunctions list 3 You are able to compile a shared library on the same platform as the target web server. Here ...
PHP - Safe_mode Bypass via proc_open() and custom Environment
PHP - Safemode Bypass via procopen and custom Environment ----------------------------------------------------------------------- + safe-bypass-procopen.txt - yet another way to bypass PHP safemode. + + By Milen Rangelov + ----------------------------------------------------------------------- Th...
PHP - 'Safe_mode' Bypass via 'proc_open()' and custom Environment
----------------------------------------------------------------------- + safe-bypass-procopen.txt - yet another way to bypass PHP safemode. + + By Milen Rangelov + ----------------------------------------------------------------------- This should work provided that you have met the following...