CVE-2007-4850: Medium severity PHP PHP vulnerability

Published Jan 25, 2008

Updated

curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context-dependent attackers to bypass safemode and openbasedir restrictions and read arbitrary files via a file:// request containing a \x00 sequence, a different vulnerability than CVE-2006-2563.

Affected Software

2 affected components

PHP PHP=5.2.5

PHP PHP=5.2.4

Event History

Jan 25, 2008

CVE Published

01:00 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4850?

CVE-2007-4850 is classified as a moderate severity vulnerability due to the potential to bypass security restrictions.

How do I fix CVE-2007-4850?

To fix CVE-2007-4850, upgrade your PHP version to at least 5.2.6 or later.

What is the impact of CVE-2007-4850?

The impact of CVE-2007-4850 allows attackers to bypass safe_mode and open_basedir restrictions, enabling them to read arbitrary files.

Which versions of PHP are affected by CVE-2007-4850?

CVE-2007-4850 affects PHP versions 5.2.4 and 5.2.5.

Can CVE-2007-4850 be exploited remotely?

Yes, CVE-2007-4850 can be exploited by context-dependent attackers remotely through specific file requests.