Test ID:	1.3.6.1.4.1.25623.1.0.900835
Category:	Web application abuses
Title:	PHP Security Bypass Vulnerability (Aug 2009)
Summary:	PHP is prone to a security bypass vulnerability.
Description:	Summary: PHP is prone to a security bypass vulnerability. Vulnerability Insight: Error exists when application fails to enforce 'safe_mode_exec_dir' and 'open_basedir' restrictions for certain functions, which can be caused via the exec, system, shell_exec, passthru, or popen functions, possibly involving pathnames such as 'C:' drive notation. Vulnerability Impact: Successful exploitation will let the local attacker execute arbitrary code and can bypass security restriction in the context of the web application. Affected Software/OS: PHP version 5.2.5. Solution: Update to PHP version 5.3.2 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-7002 BugTraq ID: 31064 http://www.securityfocus.com/bid/31064 http://downloads.securityfocus.com/vulnerabilities/exploits/31064.php
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.