The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the (1) download_dir, (2) cache_dir, (3) tmp_dir, and (4) pear-build-download directories, a different vulnerability than CVE-2007-2519.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade net-misc/mrouted.Upgrade app-misc/ca-certificates.Upgrade gnome-base/gdm.Upgrade media-libs/fmod.Upgrade app-admin/syslog-ng.Upgrade games-sports/racer-bin.Upgrade net-libs/webkit-gtk.Upgrade dev-libs/xmlsec.Upgrade dev-util/oprofile.Upgrade media-libs/xine-lib.Upgrade dev-php/PEAR-Mail.Upgrade net-misc/rsync.Upgrade dev-db/unixODBC.Upgrade dev-util/qt-creator.Upgrade x11-apps/xrdb.Upgrade sys-fs/lvm2.Upgrade dev-php/PEAR-PEAR.Upgrade app-office/gnucash.Upgrade media-sound/lastfmplayer.Upgrade sys-cluster/resource-agents.Upgrade net-libs/libsoup.Upgrade net-misc/vino.Upgrade net-analyzer/sflowtool.Upgrade dev-vcs/gitolite.Upgrade sys-apps/shadow. | Oct 30, 2017 | Mar 2, 2011 |
| Oracle_linux | — | Upgrade php-pear | Oct 16, 2024 | Mar 3, 2011 |
| Suse | — | Upgrade php5-ncursesUpgrade php5-xmlrpcUpgrade php5-mbstringUpgrade php5-domUpgrade php5-pearUpgrade php5-exifUpgrade php5-socketsUpgrade php5-pspellUpgrade php5-snmpUpgrade php5-pgsqlUpgrade php5-dbaseUpgrade php5-mhashUpgrade php5-sysvmsgUpgrade php5-curlUpgrade php5-imapUpgrade php5-sqliteUpgrade php5-dbaUpgrade php5-ctypeUpgrade php5-xslUpgrade php5-iconvUpgrade php5-tokenizerUpgrade php5-zlibUpgrade php5-bz2Upgrade php5-wddxUpgrade php5-xmlreaderUpgrade php5-shmopUpgrade php5-jsonUpgrade php5-posixUpgrade php5-hashUpgrade php5-ldapUpgrade php5-bcmathUpgrade php5-mysqlUpgrade php5-mcryptUpgrade php5-pdoUpgrade php5-gettextUpgrade php5-gdUpgrade php5-odbcUpgrade php5-opensslUpgrade apache2-mod_php5Upgrade php5-sysvsemUpgrade php5-fastcgiUpgrade php5-soapUpgrade php5-develUpgrade php5-gmpUpgrade php5-suhosinUpgrade php5-pcntlUpgrade php5-ftpUpgrade php5-calendarUpgrade php5-sysvshm | Feb 17, 2015 | Mar 2, 2011 |
| Ubuntu | — | Upgrade libapache2-mod-php5Upgrade php5-devUpgrade php-pearUpgrade php5-commonUpgrade php5-cliUpgrade php5Upgrade php5-gdUpgrade php5-cgiUpgrade php5-curlUpgrade php5-intl | Nov 8, 2024 | Mar 3, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub