PEAR Insecure Temporary File Creation Vulnerability
BID:46605
Info
PEAR Insecure Temporary File Creation Vulnerability
| Bugtraq ID: | 46605 |
| Class: | Race Condition Error |
| CVE: |
CVE-2011-1072 |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 28 2011 12:00AM |
| Updated: | Apr 13 2015 10:19PM |
| Credit: | The PHP Group |
| Vulnerable: |
Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 ARM Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise Server for VMware 11 SP1 SuSE SUSE Linux Enterprise Server 11 SP2 SuSE SUSE Linux Enterprise Server 11 SP1 SuSE SUSE Linux Enterprise Server 10 SP3 LTSS SuSE SUSE Linux Enterprise SDK 11 SP2 SuSE SUSE Linux Enterprise SDK 11 SP1 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server 6 PEAR PEAR 1.9.1 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: |
PEAR PEAR 1.9.2 |
Exploit / POC
PEAR Insecure Temporary File Creation Vulnerability
An attacker uses readily available commands to exploit this issue.
An attacker uses readily available commands to exploit this issue.
Solution / Fix
PEAR Insecure Temporary File Creation Vulnerability
Solution:
Updates are available. Please see the references for more information.
MandrakeSoft Enterprise Server 5 x86_64
MandrakeSoft Enterprise Server 5
Mandriva Linux Mandrake 2010.1 x86_64
Mandriva Linux Mandrake 2010.1
Solution:
Updates are available. Please see the references for more information.
MandrakeSoft Enterprise Server 5 x86_64
-
Mandriva php-pear-1.9.4-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Auth-1.6.4-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Auth_RADIUS-1.0.7-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Auth_SASL-1.0.6-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Cache_Lite-1.7.12-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Console_ProgressBar-0.5.2beta-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Crypt_CHAP-1.5.0-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date-1.5.0a2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays-0.21.5-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Austria-0.1.3-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Brazil-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Denmark-0.1.3-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Discordian-0.1.1-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_EnglandWales-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Germany-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Iceland-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Italy-0.1.1-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Japan-0.1.1-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Netherlands-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Norway-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_PHPdotNet-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Romania-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Slovenia-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Sweden-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Ukraine-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_UNO-0.1.3-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_USA-0.1.1-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-DB-1.7.14-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-DB_DataObject-1.9.6-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-File_Passwd-1.1.7-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-File_SMBPasswd-1.0.3-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-HTTP_Client-1.2.1-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-HTTP_Request-1.4.4-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-HTTP_Request2-2.0.0-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Image_GraphViz-1.3.0-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Log-1.12.7-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Mail-1.2.0-0.b1.0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Mail_Mime-1.8.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Mail_mimeDecode-1.5.5-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Math_BigInteger-1.0.0-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-MDB2-2.5.0-0.0.b3.0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-MDB2_Driver_mysql-1.5.0-0.0.b3.0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-MDB2_Driver_mysqli-1.5.0-0.0.b3.0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-MDB2_Driver_pgsql-1.5.0-0.0.b3.0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-MDB2_Driver_sqlite-1.5.0-0.0.b3.0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_DIME-1.0.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_IDNA-0.8.1-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_IDNA2-0.1.1-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_IPv4-1.3.4-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_LDAP2-2.0.10-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_POP3-1.3.8-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_SMTP-1.6.1-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_Socket-1.0.10-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_URL2-2.0.0-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_Vpopmaild-0.3.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Numbers_Words-0.16.3-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-OLE-1.0.0-0.RC1.0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-PEAR_Command_Packaging-0.2.0-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Spreadsheet_Excel_Writer-0.9.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-System_Command-1.0.7-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Validate-0.8.4-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-XML_Parser-1.3.4-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-XML_RPC2-1.1.1-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-XML_Serializer-0.20.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-XML_XSLT_Wrapper-0.2.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/
MandrakeSoft Enterprise Server 5
-
Mandriva php-pear-1.9.4-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Auth-1.6.4-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Auth_RADIUS-1.0.7-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Auth_SASL-1.0.6-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Cache_Lite-1.7.12-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Console_ProgressBar-0.5.2beta-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Crypt_CHAP-1.5.0-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date-1.5.0a2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays-0.21.5-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Austria-0.1.3-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Brazil-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Denmark-0.1.3-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Discordian-0.1.1-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_EnglandWales-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Germany-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Iceland-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Italy-0.1.1-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Japan-0.1.1-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Netherlands-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Norway-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_PHPdotNet-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Romania-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Slovenia-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Sweden-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_Ukraine-0.1.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_UNO-0.1.3-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Date_Holidays_USA-0.1.1-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-DB-1.7.14-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-DB_DataObject-1.9.6-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-File_Passwd-1.1.7-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-File_SMBPasswd-1.0.3-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-HTTP_Client-1.2.1-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-HTTP_Request-1.4.4-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-HTTP_Request2-2.0.0-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Image_GraphViz-1.3.0-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Log-1.12.7-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Mail-1.2.0-0.b1.0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Mail_Mime-1.8.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Mail_mimeDecode-1.5.5-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Math_BigInteger-1.0.0-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-MDB2-2.5.0-0.0.b3.0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-MDB2_Driver_mysql-1.5.0-0.0.b3.0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-MDB2_Driver_mysqli-1.5.0-0.0.b3.0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-MDB2_Driver_pgsql-1.5.0-0.0.b3.0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-MDB2_Driver_sqlite-1.5.0-0.0.b3.0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_DIME-1.0.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_IDNA-0.8.1-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_IDNA2-0.1.1-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_IPv4-1.3.4-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_LDAP2-2.0.10-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_POP3-1.3.8-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_SMTP-1.6.1-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_Socket-1.0.10-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_URL2-2.0.0-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Net_Vpopmaild-0.3.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Numbers_Words-0.16.3-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-OLE-1.0.0-0.RC1.0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-PEAR_Command_Packaging-0.2.0-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Spreadsheet_Excel_Writer-0.9.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-System_Command-1.0.7-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-Validate-0.8.4-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-XML_Parser-1.3.4-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-XML_RPC2-1.1.1-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-XML_Serializer-0.20.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva php-pear-XML_XSLT_Wrapper-0.2.2-0.1mdvmes5.2.noarch.rpm
http://www.mandriva.com/en/downloads/
Mandriva Linux Mandrake 2010.1 x86_64
-
Mandriva php-pear-1.9.4-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/
Mandriva Linux Mandrake 2010.1
-
Mandriva php-pear-1.9.4-0.1mdv2010.2.noarch.rpm
http://www.mandriva.com/en/downloads/
References
PEAR Insecure Temporary File Creation Vulnerability
References:
References:
- Fixed Bug #18056 [SECURITY]: Symlink attack in PEAR install (The PHP Group)
- PEAR Homepage (The PHP Group)
- SECURITY VULNERABILITY ANNOUNCEMENT (The PHP Group)