The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
PHP 5 before 5.2.3 does not enforce the open_basedir or safe_mode restriction in certain cases, which allows context-dependent attackers to determine the existence of arbitrary files by checking if the readfile function returns a string. NOTE: this issue might also involve the realpath function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Jun 4, 2007 |
| Php | — | Upgrade to PHP version 5.2.3 | Oct 1, 2012 | Jun 4, 2007 |
| Suse | — | Upgrade php4-exifUpgrade php5-soapUpgrade php4-xsltUpgrade php5-exifUpgrade php5-shmopUpgrade apache2-mod_php4Upgrade php4-ypUpgrade php4-zlibUpgrade php5-ncursesUpgrade php5-pdoUpgrade php5-tidyUpgrade php4-sysvshmUpgrade php4-dbaseUpgrade php4-mysqlUpgrade php4-fileproUpgrade php5-iconvUpgrade php5-domUpgrade php4-readlineUpgrade php5-gmpUpgrade php5-mbstringUpgrade php5-sysvsemUpgrade php5-odbcUpgrade php5-mcryptUpgrade php5-mysqlUpgrade mod_php4-servletUpgrade php5-socketsUpgrade php4-qtdomUpgrade php5-wddxUpgrade php4-swfUpgrade php5-ftpUpgrade php4-pearUpgrade php4-gdUpgrade php5-calendarUpgrade php5-snmpUpgrade php4-recodeUpgrade php5-bz2Upgrade php5-fastcgiUpgrade php5-xmlreaderUpgrade php5-gettextUpgrade php5-mhashUpgrade php5-imapUpgrade php5-opensslUpgrade php5-sysvmsgUpgrade php4-develUpgrade php4-ldapUpgrade suse-releaseUpgrade php4-mime_magicUpgrade php4-dbaUpgrade php4-bcmathUpgrade php5-dbaseUpgrade php4-fastcgiUpgrade php5-pcntlUpgrade apache2-mod_php5Upgrade php4-imapUpgrade php5-gdUpgrade php5-dbaUpgrade php4-ftpUpgrade apache-mod_php4Upgrade php4-pgsqlUpgrade php4-mbstringUpgrade php4-bz2Upgrade php5-pearUpgrade php5-zlibUpgrade php4-iconvUpgrade php5-bcmathUpgrade php4-domxmlUpgrade php4-shmopUpgrade php4-ctypeUpgrade php5-sqliteUpgrade php5-curlUpgrade php5-xmlrpcUpgrade php4-mhashUpgrade php5-ctypeUpgrade php4-sessionUpgrade php4-curlUpgrade php4-socketsUpgrade php5-posixUpgrade php4-mcryptUpgrade php5-pspellUpgrade php5-develUpgrade php4-sysvsemUpgrade php4-wddxUpgrade php5-xslUpgrade mod_php4-coreUpgrade php4-mcalUpgrade php4-unixODBCUpgrade php5-tokenizerUpgrade php4-gettextUpgrade php5-pgsqlUpgrade php4-calendarUpgrade php5-ldapUpgrade php4-snmpUpgrade php4-gmpUpgrade mod_php4-apache2Upgrade php5-sysvshm | Feb 17, 2015 | Jun 4, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub