vulnwire
5.0med

CVE-2007-48501 exploit

curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context-dependent attackers to bypass safe_mode and open_b…

Published 18 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
5.6%
percentile 93%
Public exploits
1
Exploit-DB

curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context-dependent attackers to bypass safe_mode and open_basedir restrictions and read arbitrary files via a file:// request containing a \x00 sequence, a different vulnerability than CVE-2006-2563.

Exploit prediction (EPSS)

5.58% probability of exploitation in the next 30 days, higher than 93% of all scored CVEs.

Exploits and detections

  • EDB-31053 PHP 5.2.5 - cURL 'safe_mode' Security Bypass · remote · 2008-01-23

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls
Technology feeds
PHP (RSS, critical only)

References

  • vupen.com /english/advisories/2008/1412 · vdb-entry, x_refsource_VUPEN, x_transferred
  • lists.apple.com /archives/security-announce//2008/Jul/msg00003.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • securityfocus.com /bid/31681 · vdb-entry, x_refsource_BID, x_transferred
  • securityfocus.com /bid/29009 · vdb-entry, x_refsource_BID, x_transferred
  • securityfocus.com /bid/27413 · vdb-entry, x_refsource_BID, x_transferred
  • vupen.com /english/advisories/2008/2268 · vdb-entry, x_refsource_VUPEN, x_transferred
  • ubuntu.com /usn/usn-628-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
  • securityfocus.com /archive/1/486856/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityreason.com /achievement_securityalert/51 · third-party-advisory, x_refsource_SREASONRES, x_transferred
  • openwall.com /lists/oss-security/2008/05/02/2 · mailing-list, x_refsource_MLIST, x_transferred
  • securityfocus.com /archive/1/492671/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/30411 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • php.net /ChangeLog-5.php · x_refsource_CONFIRM, x_transferred
  • mandriva.com /security/advisories?name=MDVSA-2009:023 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • mandriva.com /security/advisories?name=MDVSA-2009:022 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
  • secunia.com /advisories/31200 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/32222 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • lists.grok.org.uk /pipermail/full-disclosure/2008-January/059849.html · mailing-list, x_refsource_FULLDISC, x_transferred
  • securityreason.com /securityalert/3562 · third-party-advisory, x_refsource_SREASON, x_transferred
  • wiki.rpath.com /wiki/Advisories:rPSA-2008-0178 · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/31326 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2008/2780 · vdb-entry, x_refsource_VUPEN, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/42134 · vdb-entry, x_refsource_XF, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/39852 · vdb-entry, x_refsource_XF, x_transferred
  • lists.apple.com /archives/security-announce/2008/Oct/msg00001.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • support.apple.com /kb/HT3216 · x_refsource_CONFIRM, x_transferred
  • cvs.php.net /viewcvs.cgi/php-src/NEWS?revision=1.2027.2.547.2.1047&view=markup · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/30048 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.