CVE-2010-1129

The safe_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / (slash) character, which allows…

published March 26, 2010

CVSS
—
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

The safe_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / (slash) character, which allows context-dependent attackers to bypass intended access restrictions via vectors related to use of the tempnam function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02588 · 85.1th percentile
Published
2010-03-26T20:00Z
EPSS history
Timeline
  • 26 MAR 20:00Z
    The safe_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / (slash) character, which allows…
    cvelistv5