The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the (1) download_dir, (2) cache_dir, (3) tmp_dir, and (4) pear-build-download directories, a different vulnerability than CVE-2007-2519.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546164
http://news.php.net/php.pear.cvs/61264
http://openwall.com/lists/oss-security/2011/02/28/12
http://openwall.com/lists/oss-security/2011/02/28/3
http://openwall.com/lists/oss-security/2011/02/28/5
http://openwall.com/lists/oss-security/2011/03/01/4
http://openwall.com/lists/oss-security/2011/03/01/5
http://openwall.com/lists/oss-security/2011/03/01/7
http://openwall.com/lists/oss-security/2011/03/01/8
http://openwall.com/lists/oss-security/2011/03/01/9
http://pear.php.net/advisory-20110228.txt
http://pear.php.net/bugs/bug.php?id=18056
http://secunia.com/advisories/43533
http://security-tracker.debian.org/tracker/CVE-2011-1072
http://svn.php.net/viewvc?view=revision&revision=308687
http://www.mandriva.com/security/advisories?name=MDVSA-2011:187
http://www.redhat.com/support/errata/RHSA-2011-1741.html
OR
cpe:2.3:a:php:pear:0.2.2:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:0.9:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:0.10:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:0.11:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:0.90:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.0:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.1:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.2:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.3:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.3.1:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.3.3:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.3.3.1:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.3.4:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.3.5:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.3.6:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.4.0:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.4.0:rc1:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.4.0:rc2:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.5.0:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:1.6.1:*:*:*:*:*:*:*
cpe:2.3:a:php:pear:*:*:*:*:*:*:*:* versions up to 1.9.1 (inclusive)
ID | Name | Product | Family | Severity |
---|---|---|---|---|
79962 | GLSA-201412-09 : Multiple packages, Multiple vulnerabilities fixed in 2011 | Nessus | Gentoo Local Security Checks | critical |
61194 | Scientific Linux Security Update : php-pear on SL6.x | Nessus | Scientific Linux Local Security Checks | low |
58740 | SuSE 11.1 Security Update : PHP5 (SAT Patch Number 5964) | Nessus | SuSE Local Security Checks | high |
57925 | Debian DSA-2408-1 : php5 - several vulnerabilities | Nessus | Debian Local Security Checks | high |
57319 | Mandriva Linux Security Advisory : php-pear (MDVSA-2011:187) | Nessus | Mandriva Local Security Checks | low |
57021 | RHEL 6 : php-pear (RHSA-2011:1741) | Nessus | Red Hat Local Security Checks | low |
55087 | Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 / 11.04 : php5 regressions (USN-1126-2) | Nessus | Ubuntu Local Security Checks | high |
55086 | Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 / 11.04 : php5 vulnerabilities (USN-1126-1) | Nessus | Ubuntu Local Security Checks | high |