info
discussion
exploit
solution
references
PHP 'tempnam()' 'safe_mode' Restriction-Bypass Vulnerability
References:
/[svn]/php/php-src/branches/PHP_5_2/ext/standard/file.c
(PHP)
/[svn]/php/php-src/branches/PHP_5_3/ext/standard/file.c
(PHP)
PHP 5.2.11 tempnam() safe_mode bypass
(Security Reason)
PHP 5.2.12 ChangeLog
(PHP)
PHP 5.2.12 Release Announcement
(PHP)
PHP 5.3.1 ChangeLog
(PHP)
PHP 5.3.1 Release Announcement
(PHP)
PHP Homepage
(PHP)
Ubuntu Security Notice USN-862-1
(Ubuntu)
Privacy Statement
Copyright 2010, SecurityFocus