MOPB-21-2007:PHP compress.bzip2:// URL Wrapper safemode and open_basedir Bypass Vulnerability

Summary

The compress.bzip2:// URL Wrapper defined by the bz2 extension does not perform any safemode or open_basedir checks and therefore allows access to archives outside the basedir or safemode restrictions.
Affected versions

Affected is PHP <= 5.2.1
Detailed information

No details needed
Proof of concept, exploit or instructions to reproduce

To test this vulnerability just activate safemode or open_basedir in your configuration and try to access an archive outside the allowed area through the compress.bzip2:// URL Wrapper.
Notes

Safemode and open_basedir are flawed by design and will always have security holes like this one (or all the local exploits we demonstrated). The security of your server setup should therefore NEVER rely on these directives.