#38804 [Opn->Csd]: bypass php_admin_value configuration
| From: | tony2001@php.net | Date: | Wed, 13 Sep 2006 11:07:23 +0000 |
| Subject: | #38804 [Opn->Csd]: bypass php_admin_value configuration | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-102087@lists.php.net to get a copy of this message | ||
ID: 38804
Updated by: tony2001@php.net
Reported By: youza at post dot cz
-Status: Open
+Status: Closed
Bug Type: Safe Mode/open_basedir
Operating System: Linux Fedora FC4
PHP Version: 4.4.4
New Comment:
Fixed in CVS a week ago.
Previous Comments:
------------------------------------------------------------------------
[2006-09-13 11:02:46] youza at post dot cz
Description:
------------
http://securityreason.com/achievement_securityalert/42
http://www.securityfocus.com/archive/1/445651/30/30/threaded
[PHP 5.1.6 / 4.4.4 Critical php_admin* bypass by ini_restore()]
Author: Maksymilian Arciemowicz (cXIb8O3)
Date:
- - Written: 05.09.2006
- - Public: 09.09.2006
SecurityAlert Id: 42
CVE: CVE-2006-4625
SecurityRisk: High
Affected Software: PHP 5.1.6 / 4.4.4 < = x
Advisory URL: http://securityreason.com/achievement_securityalert/42
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=38804&edit=1