PHP Glob Function Local Information Disclosure Vulnerability
BID:12701
Info
PHP Glob Function Local Information Disclosure Vulnerability
| Bugtraq ID: | 12701 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 02 2005 12:00AM |
| Updated: | Mar 02 2005 12:00AM |
| Credit: | Peter Brodersen <[email protected]> is credited with disclosure of this issue. |
| Vulnerable: |
PHP PHP 5.0.3 PHP PHP 5.0.2 PHP PHP 5.0.1 PHP PHP 5.0 .0 PHP PHP 4.3.10 PHP PHP 4.3.9 PHP PHP 4.3.8 PHP PHP 4.3.7 PHP PHP 4.3.6 PHP PHP 4.3.5 PHP PHP 4.3.4 PHP PHP 4.3.3 PHP PHP 4.3.2 PHP PHP 4.3.1 PHP PHP 4.3 PHP PHP 4.2.3 PHP PHP 4.2.2 PHP PHP 4.2.1 PHP PHP 4.2 .0 PHP PHP 4.2 -dev PHP PHP 4.1.2 PHP PHP 4.1.1 PHP PHP 4.1 .0 PHP PHP 4.0.7 RC3 PHP PHP 4.0.7 RC2 PHP PHP 4.0.7 RC1 PHP PHP 4.0.7 PHP PHP 4.0.6 PHP PHP 4.0.5 PHP PHP 4.0.4 PHP PHP 4.0.3 pl1 PHP PHP 4.0.3 PHP PHP 4.0.2 PHP PHP 4.0.1 pl2 PHP PHP 4.0.1 pl1 PHP PHP 4.0.1 PHP PHP 4.0 0 |
| Not Vulnerable: | |
Discussion
PHP Glob Function Local Information Disclosure Vulnerability
A local information disclosure vulnerability affects PHP. This issue is due to a design error that presents potentially sensitive information to users within error messages.
An attacker may leverage this issue to reveal filenames and therefore the existence of files on an affected computer.
A local information disclosure vulnerability affects PHP. This issue is due to a design error that presents potentially sensitive information to users within error messages.
An attacker may leverage this issue to reveal filenames and therefore the existence of files on an affected computer.
Exploit / POC
PHP Glob Function Local Information Disclosure Vulnerability
No exploit is required to leverage this issue.
No exploit is required to leverage this issue.
Solution / Fix
PHP Glob Function Local Information Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PHP Glob Function Local Information Disclosure Vulnerability
References:
References: