PHP "php5-common.php5.cron.d" competitive Condition Vulnerability

Release date:
Updated on:

Affected Systems:
PHP 5.x
Ubuntu Linux 9.x
Ubuntu Linux 8.x
Ubuntu Linux 11.x
Ubuntu Linux 10.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 46928
Cve id: CVE-2011-0441

PHP, an abbreviated name for nesting, is the abbreviation of the English Super Text preprocessing language (PHP: Hypertext Preprocessor.

PHP "php5-common.php5.cron.d" in the implementation of a race condition vulnerability, local attackers can exploit this vulnerability to delete arbitrary files, resulting in denial of service.

<* Source: Stephen Chazelas

Link: http://bugs.debian.org/cgi-bin/bugreport.cgi? Bug = 618489
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

PHP
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.php.net