CVE-2007-3378
N/A
Published: June 29, 2007 at 06:00 PM UTC
Updated: June 16, 2026 at 10:41 PM UTC
1 product affected across 1 vendorPHP
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 5%
Description
The (1) session_save_path, (2) ini_set, and (3) error_log functions in PHP 4.4.7 and earlier, and PHP 5 5.2.3 and earlier, when invoked from a .htaccess file, allow remote attackers to bypass safe_mode and open_basedir restrictions and possibly execute arbitrary commands, as demonstrated using (a) php_value, (b) php_flag, and (c) directives in .htaccess.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501
- http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
- http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136
- http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml
- http://www.php.net/ChangeLog-4.php
References (43)
x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
http://docs.info.apple.com/article.html?artnum=307562Vendor Advisoryx_refsource_HPBroken Link
Source: [email protected]
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501Vendor Advisoryx_refsource_APPLEMailing ListThird Party Advisory
Source: [email protected]
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.htmlMailing Listx_refsource_FULLDISC
Source: [email protected]
http://seclists.org/fulldisclosure/2020/Sep/34Quick Info
StatusMODIFIED
CWE
CWE-264
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card