|
|
PHP cURL 'safe mode' Security Bypass Vulnerability
|
Bugtraq ID:
|
27413
|
|
Class:
|
Input Validation Error
|
|
CVE:
|
CVE-2007-4850
|
|
Remote:
|
Yes
|
|
Local:
|
No
|
|
Published:
|
Jan 23 2008 12:00AM
|
|
Updated:
|
Mar 06 2009 01:56AM
|
|
Credit:
|
Maksymilian Arciemowicz
|
|
Vulnerable:
|
Ubuntu Ubuntu Linux 8.04 LTS sparc
Ubuntu Ubuntu Linux 8.04 LTS powerpc
Ubuntu Ubuntu Linux 8.04 LTS lpia
Ubuntu Ubuntu Linux 8.04 LTS i386
Ubuntu Ubuntu Linux 8.04 LTS amd64
Ubuntu Ubuntu Linux 7.10 sparc
Ubuntu Ubuntu Linux 7.10 powerpc
Ubuntu Ubuntu Linux 7.10 lpia
Ubuntu Ubuntu Linux 7.10 i386
Ubuntu Ubuntu Linux 7.10 amd64
Ubuntu Ubuntu Linux 7.04 sparc
Ubuntu Ubuntu Linux 7.04 powerpc
Ubuntu Ubuntu Linux 7.04 i386
Ubuntu Ubuntu Linux 7.04 amd64
Ubuntu Ubuntu Linux 6.06 LTS sparc
Ubuntu Ubuntu Linux 6.06 LTS powerpc
Ubuntu Ubuntu Linux 6.06 LTS i386
Ubuntu Ubuntu Linux 6.06 LTS amd64
Turbolinux Turbolinux Server 10.0
Turbolinux Turbolinux Server 11 x64
Turbolinux Turbolinux Server 11
Turbolinux Turbolinux Server 10.0.0 x64
TurboLinux Personal
TurboLinux Multimedia
Turbolinux Client 2008
Turbolinux Appliance Server Workgroup Edition 1.0
Turbolinux Appliance Server Hosting Edition 1.0
Turbolinux Appliance Server 1.0 Workgroup Edition
Turbolinux Appliance Server 1.0 Hosting Edition
Turbolinux Appliance Server 3.0 x64
Turbolinux Appliance Server 3.0
Turbolinux Appliance Server 2.0
rPath rPath Linux 1
PHP PHP 5.2.5
PHP PHP 5.2.4
PHP PHP 4.4.8
PHP PHP 4.4.7
-
Slackware Linux 10.2
-
Slackware Linux 11.0
-
Slackware Linux -current
PHP PHP 4.4.6
PHP PHP 4.4.5
PHP PHP 4.4.4
MandrakeSoft Linux Mandrake 2008.0 x86_64
MandrakeSoft Linux Mandrake 2008.0
MandrakeSoft Corporate Server 4.0 x86_64
MandrakeSoft Corporate Server 4.0
Apple Mac OS X Server 10.5.5
Apple Mac OS X Server 10.5.4
Apple Mac OS X Server 10.4.11
Apple Mac OS X 10.5.4
Apple Mac OS X 10.4.11
|
|
|
|
Not Vulnerable:
|
PHP PHP 5.2.6
PHP PHP 4.4.9
|
|
|
