PHP cURL and GD Multiple Safe_Mode and Open_Basedir Restriction Bypass Vulnerabilities

info
discussion
exploit
solution
references

PHP cURL and GD Multiple Safe_Mode and Open_Basedir Restriction Bypass Vulnerabilities

PHP cURL and GD are prone to multiple safe_mode and open_basedir restriction-bypass vulnerabilities. Successful exploitation could allow an attacker to access sensitive information.

This issue is reported to affect PHP versions 4.4.0 and 5.0.5; other versions may also be vulnerable.