Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Permissions Privileges and Access Controls Vulnerability - CVE-2008-5624 - Vulnerability Database
PHP

PHP Permissions Privileges and Access Controls Vulnerability - CVE-2008-5624

High
Reference: CVE-2008-5624
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2008-5624
Title: PHP Permissions Privileges and Access Controls Vulnerability
Overview:

PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function which allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root as demonstrated by a setting of /etc for the error_log variable.