OSVDB ID: 52205

Title: PHP error_log php_admin_flag Safe Mode Bypass

Info

Disclosure

Nov 20, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Local / Remote, Context Dependent
Exploit: Exploit Public
Disclosure: Vendor Verified

Solution

Products

Unknown or Incomplete

References

Keyword: c01905287,HPSBUX02465,SSRT090192 HPSBUX02431, SSRT090085, c01756421
CVE ID: 2008-5625 (see also: NVD)
Bugtraq ID: 32383
Secunia Advisory ID: 35650 38090 38669
ISS X-Force ID: 47314
Milw0rm: 7171
Exploit Database: 7171
Other Advisory URL: HPSBUX02431 SSRT090085: http://securityreason.com/achievement_securityalert/57
http://www.mandriva.com/security/advisories?name=MDVSA-2009:045
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2008-11/0152.html
http://archives.neohapsis.com/archives/bugtraq/2009-07/0008.html
http://seclists.org/bugtraq/2009/Oct/172
Vendor Specific News/Changelog Entry: http://cvs.php.net/viewvc.cgi/php-src/NEWS?revision=1.2027.2.547.2.1315&view=markup
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00008.html
http://wiki.rpath.com/Advisories:rPSA-2009-0035
http://www.php.net/ChangeLog-5.php#5.2.7
Vendor Specific Advisory URL: http://www.gentoo.org/security/en/glsa/glsa-201001-03.xml
http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01756421
Vendor URL: http://www.php.net/

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/52205