CVE-2008-5625: High severity PHP PHP vulnerability
PHP 5 before 5.2.7 does not enforce the errorlog safemode restrictions when safemode is enabled through a phpadminflag setting in httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "phpvalue errorlog" entry in a .htaccess file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
PHPto a version that resolves this vulnerability.Fixed in 5.2.7
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5625?
CVE-2008-5625 is considered to be a medium severity vulnerability due to its ability to allow arbitrary file writes.
How do I fix CVE-2008-5625?
To fix CVE-2008-5625, upgrade PHP to version 5.2.7 or later to ensure proper enforcement of safe_mode restrictions.
What versions of PHP are affected by CVE-2008-5625?
CVE-2008-5625 affects PHP versions 5.0.0 up to 5.2.6, including specific earlier versions like 5.1.0 to 5.1.6.
What type of attacks can occur due to CVE-2008-5625?
CVE-2008-5625 allows attackers to exploit safe_mode settings to write arbitrary files through malicious .htaccess entries.
Is there a possible workaround for CVE-2008-5625 if I cannot upgrade PHP?
Yes, as a temporary workaround, you can disable the use of .htaccess files or reconfigure your server settings to prevent context-dependent attacks.