Description

The session extension in PHP before 5.2.4 might allow local users to bypass open_basedir restrictions via a session file that is a symlink.

Remediation

References

CVE-2007-4652

Related Vulnerabilities

MySQL CVE-2015-4904 Vulnerability (CVE-2015-4904)

SharePoint CVE-2024-30100 Vulnerability (CVE-2024-30100)

Apache Tomcat version older than 7.0.30

Drupal Incorrect Authorization Vulnerability (CVE-2011-2726)

XWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-34467)

Severity

Medium

Classification

CVE-2007-4652 CWE-59

Tags

Missing Update Known Vulnerabilities