PHP Realpath() Safe_Mode and Open_Basedir Restriction Bypass Vulnerability

PHP Realpath() Safe_Mode and Open_Basedir Restriction Bypass Vulnerability

PHP is prone to a 'safe_mode' and 'open_basedir' restriction-bypass vulnerability. Successful exploits could allow an attacker to determine the presence of files in unauthorized locations.

This vulnerability would be an issue in shared-hosting configurations where multiple users can create and execute arbitrary PHP script code; in such cases, the 'safe_mode' and 'open_basedir' restrictions are expected to isolate users from each other.

Versions prior to PHP 5.2.3 are vulnerable to this issue.