CVE-2007-4652

Description

The session extension in PHP before 5.2.4 might allow local users to bypass open_basedir restrictions via a session file that is a symlink.

Affected Platforms

Weakness Type

CWE-59

References

• http://secunia.com/advisories/26642
• http://secunia.com/advisories/26822
• http://secunia.com/advisories/26838
• http://secunia.com/advisories/27102
• http://secunia.com/advisories/27377
• http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml