FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2007-3997

This CVE name corresponds to:

Entered	Topic
2007-09-11	php -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2007-3997 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2007-3997
Phase	Assigned(20070725)

Description

The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safe_mode and open_basedir restrictions via MySQL LOCAL INFILE operations, as demonstrated by a query with LOAD DATA LOCAL INFILE.

References

Source	Reference
MILW0RM	4392
MISC	http://secweb.se/en/advisories/php-mysql-safe-mode-bypass-vulnerability/
CONFIRM	http://www.php.net/ChangeLog-5.php#5.2.4
CONFIRM	http://www.php.net/releases/5_2_4.php
CONFIRM	https://issues.rpath.com/browse/RPL-1702
CONFIRM	https://issues.rpath.com/browse/RPL-1693
CONFIRM	http://www.php.net/ChangeLog-4.php
CONFIRM	http://www.php.net/releases/4_4_8.php
GENTOO	GLSA-200710-02
TRUSTIX	2007-0026
VUPEN	ADV-2007-3023
SECUNIA	26642
SECUNIA	26822
SECUNIA	26838
SECUNIA	27377
SECUNIA	27102
SECUNIA	28318
SREASON	3102
VUPEN	ADV-2008-0059
XF	php-local-infile-security-bypass(36384)
XF	php-localinfile-mysql-security-bypass(39402)