CVE-2010-1130

원문 설명

session.c in the session extension in PHP before 5.2.13, and 5.3.1, does not properly interpret ; (semicolon) characters in the argument to the session_save_path function, which allows context-dependent attackers to bypass open_basedir and safe_mode restrictions via an argument that contains multiple ; characters in conjunction with a .. (dot dot).

영향받는 소프트웨어

• PHP = 5.0.2= 5.1.3≤ 5.2.12= 5.0.0= 5.2.8= 5.1.2 정확 일치

상세

공개일

2010-03-27

최종 수정

2024-09-17

CVSS 벡터

AV:N/AC:L/Au:N/C:N/I:P/A:N

참고 자료

• cve.org/CVE-2010-1130
• nvd.nist.gov/vuln/detail/CVE-2010-1130
• svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/session/session.c?r1=293036&r2=294272
• www.vupen.com/english/advisories/2010/0479
• www.php.net/releases/5_2_13.php
• svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/session/session.c?r1=293036&r2=294272
• www.php.net/ChangeLog-5.php
• secunia.com/advisories/38708
• svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/session/session.c?view=log
• svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/session/session.c?view=log
• securitytracker.com/id?1023661
• securityreason.com/achievement_securityalert/82
• securityreason.com/securityalert/7008