The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress.zlib:// URI.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Php | — | Upgrade to PHP version 5.1.3Upgrade to PHP version 4.4.3 | Oct 1, 2012 | Apr 10, 2006 |
| Ubuntu | — | Upgrade libapache2-mod-php4Upgrade php5-cliUpgrade php4-cgiUpgrade php4-cliUpgrade php5-cgiUpgrade libapache2-mod-php5Upgrade php5-curl | Nov 8, 2024 | Apr 10, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub