Zend Optimizer contains a flaw that may allow an attacker to gain access to unauthorized privileges. The issue is triggered when improper permissions are given to the f flag in the everyone group, allowing a local attacker to gain elevated privileges.
Classification
Location:
Remote / Network Access
Attack Type:
Misconfiguration
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Public
Disclosure:
Vendor Verified,
Coordinated Disclosure
Solution
Upgrade to version 3.3.3 (2012-03-29) or higher, as it has been reported to fix this vulnerability. Note that this flaw was fixed in the 2012-03-29 release without a change in version number. An upgrade is required as there are no known workarounds.
