CVE-2007-3007: Medium severity PHP PHP vulnerability
PHP 5 before 5.2.3 does not enforce the openbasedir or safemode restriction in certain cases, which allows context-dependent attackers to determine the existence of arbitrary files by checking if the readfile function returns a string. NOTE: this issue might also involve the realpath function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3007?
CVE-2007-3007 is considered a medium severity vulnerability due to its potential to expose sensitive file existence information.
How do I fix CVE-2007-3007?
To fix CVE-2007-3007, upgrade PHP to version 5.2.3 or later to ensure proper enforcement of open_basedir and safe_mode restrictions.
Which versions of PHP are affected by CVE-2007-3007?
CVE-2007-3007 affects PHP versions prior to 5.2.3, specifically those in the 5.0.0 to 5.2.2 range.
What attacks are possible with CVE-2007-3007?
CVE-2007-3007 may allow attackers to determine the existence of arbitrary files on the server, potentially leading to further exploitation.
Is CVE-2007-3007 still a concern today?
While CVE-2007-3007 is outdated, it may still be a concern for systems running unsupported versions of PHP.