PHP open_basedir protection bypass updated since 04.10.2006
Published:		09.10.2006
Source:		BUGTRAQ
SecurityVulns ID:		6681
Type:		local
Level:		5/10
Description:		By using symbolic links in race period of time it's possible to bypass open_basedir protection.

Affected:		PHP : PHP 4.4
		PHP : PHP 5.2

Original document		paisterist.nst_(at)_gmail.com, PHP open_basedir with symlink() function Race Condition PoC exploit (09.10.2006)
		Stefan Esser, Advisory 08/2006: PHP open_basedir Race Condition Vulnerability (04.10.2006)

Discuss:

Read or add your comments to this news (0 comments)