Description
The posix_mkfifo function in ext/posix/posix.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass open_basedir restrictions, and create FIFO files, via the pathname and mode arguments, as demonstrated by creating a .htaccess file.
Remediation
References
Related Vulnerabilities
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-9481)
Oracle Database Server CVE-2019-2734 Vulnerability (CVE-2019-2734)
PHP Other Vulnerability (CVE-2007-0909)
WordPress Plugin Slideshow Multiple Cross-Site Scripting Vulnerabilities (2.1.14)
Oracle Application Server CVE-2007-5524 Vulnerability (CVE-2007-5524)