Lucene search
Ubuntu.comUB:CVE-2008-2666HistoryJun 20, 2008 - 12:00 a.m.
CVE-2008-2666
2008-06-2000:00:00
ubuntu.com
ubuntu.com
1
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.007 Low
EPSS
Percentile
80.1%
Multiple directory traversal vulnerabilities in PHP 5.2.6 and earlier allow
context-dependent attackers to bypass safe_mode restrictions by creating a
subdirectory named http: and then placing …/ (dot dot slash) sequences in
an http URL argument to the (1) chdir or (2) ftok function.
Notes
| Author | Note |
|---|---|
| kees | safe_mode not supported |
Related
seebug
seebug
PHP chdir()和ftok()函数绕过safe_mode限制漏洞
2008-06-20 00:00:00
PHP 5 'chdir()'和'ftok()' 'safe_mode'安全绕过漏洞
2008-06-23 00:00:00
prion
prion
Directory traversal
2008-06-20 01:41:00
cve
cve
CVE-2008-2666
2008-06-20 01:41:00
securityvulns
securityvulns
[Full-disclosure] PHP 5.2.6 chdir(), ftok() (standard ext) safe_mode bypass
2008-06-23 00:00:00
PHP safe_mode protection bypass
2008-06-23 00:00:00
About the security content of Security Update 2009-002 / Mac OS X v10.5.7
2009-05-14 00:00:00
openvas
openvas
FreeBSD Ports: php5-posix
2008-09-04 00:00:00
FreeBSD Ports: php5-posix
2008-09-04 00:00:00
Slackware Advisory SSA:2008-339-01 php
2012-09-11 00:00:00
freebsd
freebsd
php -- input validation error in safe_mode
2008-06-17 00:00:00
nessus
nessus
FreeBSD : php -- input validation error in safe_mode (ee6fa2bd-406a-11dd-936a-0015af872849)
2008-09-05 00:00:00
Slackware 12.0 / 12.1 / current : php (SSA:2008-339-01)
2008-12-05 00:00:00
PHP 5.x < 5.2.7 Multiple Vulnerabilities
2014-11-17 00:00:00
slackware
slackware
[slackware-security] php
2008-12-05 07:37:41
gentoo
gentoo
PHP: Multiple vulnerabilities
2008-11-16 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.007 Low
EPSS
Percentile
80.1%
Related for UB:CVE-2008-2666