| Package | Affected versions | Patched versions |
|---|---|---|
| php | = 5.0.0= 5.0.1= 5.0.2= 5.0.3= 5.0.4= 5.0.5= 5.1.0= 5.1.1= 5.1.2= 5.1.3= 5.1.4= 5.1.5= 5.1.6= 5.2.0= 5.2.1= 5.2.2= 5.2.3= 5.2.4= 5.2.5≤ 5.2.6 |
PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free