PHP posix_getpwnam / posix_getpwuid safe_mode Circumvention Vulnerability
BID:4606
Info
PHP posix_getpwnam / posix_getpwuid safe_mode Circumvention Vulnerability
| Bugtraq ID: | 4606 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 23 2002 12:00AM |
| Updated: | Apr 23 2002 12:00AM |
| Credit: | Credited to veins <[email protected]>. |
| Vulnerable: |
PHP PHP 4.1.2 PHP PHP 4.1.1 PHP PHP 4.1 .0 PHP PHP 4.0.7 PHP PHP 4.0.6 PHP PHP 4.0.5 PHP PHP 4.0.4 PHP PHP 4.0.3 PHP PHP 4.0.2 PHP PHP 4.0.1 PHP PHP 4.0 0 |
| Not Vulnerable: | |
Discussion
PHP posix_getpwnam / posix_getpwuid safe_mode Circumvention Vulnerability
PHP is a server side scripting language, designed to be embedded within HTML files. It is available for Windows, Linux, and many Unix based operating systems. It is commonly used for web development, and is very widely deployed.
PHP safe_mode and open_basedir do not restrict the usage of posix_getpwnam and posix_getpwuid, allowing malicious scripts to access information related to local users of the system. Brute force enumeration of all user accounts is possible.
PHP is a server side scripting language, designed to be embedded within HTML files. It is available for Windows, Linux, and many Unix based operating systems. It is commonly used for web development, and is very widely deployed.
PHP safe_mode and open_basedir do not restrict the usage of posix_getpwnam and posix_getpwuid, allowing malicious scripts to access information related to local users of the system. Brute force enumeration of all user accounts is possible.
Solution / Fix
PHP posix_getpwnam / posix_getpwuid safe_mode Circumvention Vulnerability
Solution:
Administrators may use the 'disable_functions' configuration directive in PHP to block the usage of these functions.
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Administrators may use the 'disable_functions' configuration directive in PHP to block the usage of these functions.
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PHP posix_getpwnam / posix_getpwuid safe_mode Circumvention Vulnerability
References:
References:
- PHP Homepage (PHP Group)