Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

CVE-2007-5900

Published

15 years ago

Last Modified

4 years ago

CVSSv2.0 Severity

Medium

Impact Analysis

Share on Facebook
Share on LinkedIn
Share on Twitter

PHP before 5.2.5 allows local users to bypass protection mechanisms configured through php_admin_value or php_admin_flag in httpd.conf by using ini_set to modify arbitrary configuration variables, a different issue than CVE-2006-4625..

CVSSv2.0 Score

Severity: Medium
Base Score: 6.9/10
Exploit Score: 3.4/10
Access Vector: Local
Access Complexity: Medium
Authentication Required: None
Impact Score: 10/10
Confidentiality Impact: Complete
Availability Impact: Complete
Integrity Impact: Complete

Products Affected

CPE	Affected	Vulnerable	Excluding	Edit
cpe:2.3:a:php:php::::::::	Yes	-	-

References

http://bugs.php.net/bug.php?id=41561
http://www.php.net/ChangeLog-5.php#5.2.5
http://www.php.net/releases/5_2_5.php
http://securitytracker.com/id?1018934
http://secunia.com/advisories/27648
https://issues.rpath.com/browse/RPL-1943
http://secunia.com/advisories/27659
http://secunia.com/advisories/30040
http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0242
http://www.securityfocus.com/archive/1/491693/100/0/threaded