CVE-2007-4850

Related Files

Mandriva Linux Security Advisory 2009-065

Posted Mar 5, 2009

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2009-065 - A vulnerability in the cURL library in PHP allowed context-dependent attackers to bypass safe_mode and open_basedir restrictions and read arbitrary files using a special URL request. Improved mbfl_filt_conv_html_dec_flush() error handling in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c. PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web server by modifying the mbstring.func_overload setting within.htaccess, which causes this setting to be applied to other virtual hosts on the same server. The updated packages have been patched to correct these issues.

tags | advisory, web, arbitrary, local, php

systems | linux, mandriva

advisories | CVE-2007-4850, CVE-2008-5557, CVE-2009-0754

SHA-256 | 81600b7210442d8910e0548f3b3b74df0d0b40a044f36901a7a75ad77feb28fc

Download | Favorite | View

Mandriva Linux Security Advisory 2009-023

Posted Jan 23, 2009

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2009-023 - Denial of service, bypass, and various buffer overflows have been addressed in the php package.

tags | advisory, denial of service, overflow, php

systems | linux, mandriva

advisories | CVE-2007-4782, CVE-2007-4850, CVE-2008-1384, CVE-2008-2050, CVE-2008-2371, CVE-2008-3658, CVE-2008-3659, CVE-2008-3660, CVE-2008-5498

SHA-256 | 92466f410be73bf8a3cbb21d9967b91cb688bf798202ffc8693fb04ad04223e3

Download | Favorite | View

Mandriva Linux Security Advisory 2009-022

Posted Jan 21, 2009

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2009-022 - Denial of service, bypass, integer overflow, and stack overflow vulnerabilities have been addressed in php.

tags | advisory, denial of service, overflow, php, vulnerability

systems | linux, mandriva

advisories | CVE-2007-4782, CVE-2007-4850, CVE-2008-1384, CVE-2008-2050, CVE-2008-3658, CVE-2008-3659, CVE-2008-3660, CVE-2008-5498

SHA-256 | 4ea99f4240ecfa30f2ade91fa5134f537e90a95ae74fc87ce3b6a0bdc94aad8f

Download | Favorite | View

Ubuntu Security Notice 628-1

Posted Jul 23, 2008

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 628-1 - Over a dozen vulnerabilities in php5 have been addressed in Ubuntu.

tags | advisory, vulnerability

systems | linux, ubuntu

advisories | CVE-2007-4782, CVE-2007-4850, CVE-2007-5898, CVE-2007-5899, CVE-2008-0599, CVE-2008-1384, CVE-2008-2050, CVE-2008-2051, CVE-2008-2107, CVE-2008-2108, CVE-2008-2371, CVE-2008-2829

SHA-256 | 3f4762bf322681e8f3484947ebc156f14c168b070b0d2ba92a048e740c8ac08f

Download | Favorite | View

php525-curlbypass.txt

Posted Jan 24, 2008

Authored by Maksymilian Arciemowicz | Site securityreason.com

PHP versions 5.2.5 and 5.2.4 suffer from a cURL related safe_mode bypass vulnerability.

tags | advisory, php, bypass

advisories | CVE-2007-4850

SHA-256 | b7cc5ffd01f2b7dfd6146eb89b796d340c095a734fb88911e8dfd9cd3e66e284

Download | Favorite | View