OSVDB ID: 42107

Title: PEAR MDB2 LOB URL Handling Information Disclosure

Info

Disclosure

Oct 28, 2007

Discovery

Feb 04, 2007

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Attack Type: Information Disclosure
Impact: Loss of Confidentiality
Disclosure: Vendor Verified

Solution

Upgrade to version 2.5.0a1 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

CVE ID: 2007-5934 (see also: NVD)
Bugtraq ID: 26382
Secunia Advisory ID: 27572 27626 27983
VUPEN Advisory: ADV-2007-3806
Vendor Specific News/Changelog Entry: http://bugs.gentoo.org/show_bug.cgi?id=198446
http://pear.php.net/bugs/bug.php?id=10024
http://pear.php.net/package/MDB2/download/2.5.0a1
Other Advisory URL: http://www.gentoo.org/security/en/glsa/glsa-200712-05.xml
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00434.html

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/42107