Description

The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via unspecified vectors.

References

http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00021.html

http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00022.html

http://osvdb.org/84100

http://secunia.com/advisories/49969

http://secunia.com/advisories/51178

http://www.mandriva.com/security/advisories?name=MDVSA-2012:108

http://www.php.net/ChangeLog-5.php

http://www.securityfocus.com/bid/54612

http://www.securitytracker.com/id?1027286

https://hermes.opensuse.org/messages/15376003

Details

Risk Information

CVSS v2