PHP 'open _ basedir' Security Restriction Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
PHP 5.3.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 54612
Cve id: CVE-2012-3365

PHP is an embedded HTML language. PHP is similar to Microsoft's ASP. It is a script language that is executed on the server side and embedded in HTML documents, the language style is similar to the C language and is widely used by many website programmers.

PHP versions earlier than 5.3.15 have errors in SQLite extensions. You can bypass the "open_basedir" feature.

<* Source: vendor

Link: http://secunia.com/advisories/49969/
Http://www.php.net/ChangeLog-5.php#5.3.15
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

PHP
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.php.net