Multiple vulnerabilities in PHP



| Updated: 2025-06-08
Risk Medium
Patch available YES
Number of vulnerabilities 2
CVE-ID CVE-2008-0145
CVE-2007-3378
CWE-ID CWE-264
Exploitation vector Network
Public exploit N/A
Vulnerable software
 PHP
Universal components / Libraries / Scripting languages

Vendor PHP Group

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU110351

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2008-0145

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Unspecified vulnerability in glob in PHP before 4.4.8, when open_basedir is enabled, has unknown impact and attack vectors. NOTE: this issue reportedly exists because of a regression related to CVE-2007-4663.

Mitigation

Install update from vendor's website.

Vulnerable software versions

PHP: 4.4 - 4.4.7

CPE2.3 External links

https://bugs.php.net/bug.php?id=41655
https://secunia.com/advisories/28318
https://secunia.com/advisories/28936
https://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136
https://www.php.net/ChangeLog-4.php
https://www.php.net/releases/4_4_8.php
https://www.vupen.com/english/advisories/2008/0059
https://exchange.xforce.ibmcloud.com/vulnerabilities/39401


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU110390

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2007-3378

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

The (1) session_save_path, (2) ini_set, and (3) error_log functions in PHP 4.4.7 and earlier, and PHP 5 5.2.3 and earlier, when invoked from a .htaccess file, allow remote attackers to bypass safe_mode and open_basedir restrictions and possibly execute arbitrary commands, as demonstrated using (a) php_value, (b) php_flag, and (c) directives in .htaccess.

Mitigation

Install update from vendor's website.

Vulnerable software versions

PHP: 4.4 - 4.4.7

CPE2.3 External links

https://docs.info.apple.com/article.html?artnum=307562
https://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501
https://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
https://seclists.org/fulldisclosure/2020/Sep/34
https://secunia.com/advisories/26642
https://secunia.com/advisories/26822
https://secunia.com/advisories/26838
https://secunia.com/advisories/27102
https://secunia.com/advisories/27377
https://secunia.com/advisories/27648
https://secunia.com/advisories/28318
https://secunia.com/advisories/28750
https://secunia.com/advisories/28936
https://secunia.com/advisories/29420
https://secunia.com/advisories/30040
https://securityreason.com/achievement_exploitalert/9
https://securityreason.com/achievement_securityalert/45
https://securityreason.com/securityalert/2831
https://securityreason.com/securityalert/3389
https://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136
https://www.gentoo.org/security/en/glsa/glsa-200710-02.xml
https://www.openwall.com/lists/oss-security/2020/09/17/3
https://www.osvdb.org/38682
https://www.php.net/ChangeLog-4.php
https://www.php.net/ChangeLog-5.php#5.2.4
https://www.php.net/ChangeLog-5.php#5.2.5
https://www.php.net/releases/4_4_8.php
https://www.php.net/releases/5_2_4.php
https://www.php.net/releases/5_2_5.php
https://www.securityfocus.com/archive/1/472343/100/0/threaded
https://www.securityfocus.com/archive/1/491693/100/0/threaded
https://www.securityfocus.com/bid/24661
https://www.securityfocus.com/bid/25498
https://www.trustix.org/errata/2007/0026/
https://www.vupen.com/english/advisories/2007/3023
https://www.vupen.com/english/advisories/2008/0059
https://www.vupen.com/english/advisories/2008/0398
https://www.vupen.com/english/advisories/2008/0924/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/35102
https://exchange.xforce.ibmcloud.com/vulnerabilities/39403
https://issues.rpath.com/browse/RPL-1693
https://issues.rpath.com/browse/RPL-1702
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6056


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###