PHP posix_access() security bypass
| php-posixaccess-security-bypass (43196) |  Medium Risk |
Description:
PHP could allow a remote attacker to bypass security restrictions, caused by an error in the posix_access() and possibly other functions. A remote attacker could exploit this vulnerability using a specially-crafted PHP script to bypass safe mode restrictions on a shared-server environment to access arbitrary files outside of the Web root and possibly launch further attacks against the system.
Platforms Affected:
- Gentoo, Linux
- PHP, PHP 5.2.6
Remedy:
No remedy available as of November 15, 2008.
Consequences:
Bypass Security
References:
- PHP Web site, PHP: Hypertext Preprocessor at http://www.php.net/.
- SecurityReason Advisory: SecurityAlert : 54, PHP 5.2.6 posix_access() (posix ext) safe_mode bypass at http://securityreason.com/achievement_securityalert/54.
- BID-29797: PHP 5 'posix_access()' Function 'safe_mode' Bypass Directory Traversal Vulnerability
- CVE-2008-2665: Directory traversal vulnerability in the posix_access function in PHP 5.2.6 and earlier allows remote attackers to bypass safe_mode restrictions via a .. (dot dot) in an http URL, which results in the URL being canonicalized to a local filename after the safe_mode check has successfully run.
- GLSA-200811-05: PHP: Multiple vulnerabilities
- SECTRACK ID: 1020327: PHP posix_access() safe_mode Restrictions Can By Bypass With 'http://' Prefix
Reported:
Jun 18, 2008
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net