Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

suphp: privilege escalation

Package(s):

suphp

CVE #(s):

CVE-2008-1614

Created:

April 18, 2008

Updated:

April 23, 2008

Description:

suPHP before 0.6.3 allows local users to gain privileges via (1) a race condition that involves multiple symlink changes to point a file owned by a different user, or (2) a symlink to the directory of a different user, which is used to determine privileges.

Alerts:

Debian

DSA-1550-1

2008-04-17

(Log in to post comments)