Test Kennung:	1.3.6.1.4.1.25623.1.0.900835
Kategorie:	Web application abuses
Titel:	PHP Security Bypass Vulnerability - Aug09
Zusammenfassung:	PHP is prone to a security bypass vulnerability.
Beschreibung:	Summary: PHP is prone to a security bypass vulnerability. Vulnerability Insight: Error exists when application fails to enforce 'safe_mode_exec_dir' and 'open_basedir' restrictions for certain functions, which can be caused via the exec, system, shell_exec, passthru, or popen functions, possibly involving pathnames such as 'C:' drive notation. Vulnerability Impact: Successful exploitation will let the local attacker execute arbitrary code and can bypass security restriction in the context of the web application. Affected Software/OS: PHP version 5.2.5. Solution: Update to PHP version 5.3.2 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	BugTraq ID: 31064 Common Vulnerability Exposure (CVE) ID: CVE-2008-7002 http://www.securityfocus.com/bid/31064 http://downloads.securityfocus.com/vulnerabilities/exploits/31064.php
Copyright	Copyright (C) 2009 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.