Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

php4: multiple vulnerabilities

Package(s):

php4

CVE #(s):

Created:

February 20, 2005

Updated:

February 21, 2005

Description:

A vulnerability was reported in PHP in the cURL functions. A script can bypass the 'open_basedir' directory setting. See this SecurityTracker Alert for more information.

Alerts:

Ubuntu	USN-66-2	2005-02-17
Ubuntu	USN-66-1	2005-01-20

(Log in to post comments)

php4: multiple vulnerabilities

Posted Feb 8, 2005 0:01 UTC (Tue) by barrygould (guest, #4774) [Link]

I don't see any other references to this... could this be a duplicate of earlier PHP vulnerabilites?

php4: multiple vulnerabilities

Posted Feb 8, 2005 1:27 UTC (Tue) by ris (editor, #5) [Link]

The Ubuntu alert references Security Tracker - Oct. 2004 and BugTraq - Dec. 2004.

I couldn't find any older vulnerabilities in our database that would cover it.