|
|
>> PHP "error_log()" Destination Parameter Handling Safe Mode Bypass Vulnerability
|
Title : PHP "error_log()" Destination Parameter Handling Safe Mode Bypass Vulnerability
VUPEN ID : VUPEN/ADV-2006-2523
CVE ID : CVE-2006-3011
Rated as : Low Risk 
Remotely Exploitable : No
Locally Exploitable : Yes
Release Date : 2006-06-26
|
A vulnerability has been identified in PHP, which could be exploited by local attackers to bypass security restrictions. This issue is due to an input validation error in the "error_log()" function that does not properly validate the destination parameter, which could be exploited by malicious users to bypass the safe mode feature by supplying a "php://" wrapper with directory traversal sequences as a destination argument.
Affected Products
PHP version 5.1.4 and prior
PHP version 4.4.2 and prior
Solution
Upgrade to PHP version 4.4.3 or 5.1.5 :
http://www.php.net/downloads.php
References
http://www.vupen.com/english/advisories/2006/2523
http://www.frsirt.com/english/reference/14365
Credits
Vulnerability reported by Maksymilian Arciemowicz
ChangeLog
2006-06-26 : Initial release
2006-08-18 : Updated Solution
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
