ByteOS Network

CVE Vulnerability Details :

CVE-2011-1072

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-03 Mar, 2011 | 00:00

Updated At-06 Aug, 2024 | 22:14

▼CVE Numbering Authority (CNA)

The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the (1) download_dir, (2) cache_dir, (3) tmp_dir, and (4) pear-build-download directories, a different vulnerability than CVE-2007-2519.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://openwall.com/lists/oss-security/2011/02/28/5	mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/01/7	mailing-list x_refsource_MLIST
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546164	x_refsource_CONFIRM
http://secunia.com/advisories/43533	third-party-advisory x_refsource_SECUNIA
http://openwall.com/lists/oss-security/2011/03/01/8	mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/02/28/12	mailing-list x_refsource_MLIST
http://news.php.net/php.pear.cvs/61264	x_refsource_CONFIRM
http://security-tracker.debian.org/tracker/CVE-2011-1072	x_refsource_CONFIRM
http://openwall.com/lists/oss-security/2011/03/01/5	mailing-list x_refsource_MLIST
http://openwall.com/lists/oss-security/2011/03/01/4	mailing-list x_refsource_MLIST
http://www.redhat.com/support/errata/RHSA-2011-1741.html	vendor-advisory x_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=MDVSA-2011:187	vendor-advisory x_refsource_MANDRIVA
http://pear.php.net/bugs/bug.php?id=18056	x_refsource_CONFIRM
http://openwall.com/lists/oss-security/2011/02/28/3	mailing-list x_refsource_MLIST
https://exchange.xforce.ibmcloud.com/vulnerabilities/65721	vdb-entry x_refsource_XF
http://svn.php.net/viewvc?view=revision&revision=308687	x_refsource_CONFIRM
http://pear.php.net/advisory-20110228.txt	x_refsource_CONFIRM
http://www.securityfocus.com/bid/46605	vdb-entry x_refsource_BID
http://openwall.com/lists/oss-security/2011/03/01/9	mailing-list x_refsource_MLIST

Hyperlink: http://openwall.com/lists/oss-security/2011/02/28/5

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://openwall.com/lists/oss-security/2011/03/01/7

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546164

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/43533

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://openwall.com/lists/oss-security/2011/03/01/8

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://openwall.com/lists/oss-security/2011/02/28/12

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://news.php.net/php.pear.cvs/61264

Resource:

x_refsource_CONFIRM

Hyperlink: http://security-tracker.debian.org/tracker/CVE-2011-1072

Resource:

x_refsource_CONFIRM

Hyperlink: http://openwall.com/lists/oss-security/2011/03/01/5

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://openwall.com/lists/oss-security/2011/03/01/4

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.redhat.com/support/errata/RHSA-2011-1741.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2011:187

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://pear.php.net/bugs/bug.php?id=18056

Resource:

x_refsource_CONFIRM

Hyperlink: http://openwall.com/lists/oss-security/2011/02/28/3

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/65721

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://svn.php.net/viewvc?view=revision&revision=308687

Resource:

x_refsource_CONFIRM

Hyperlink: http://pear.php.net/advisory-20110228.txt

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/46605

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://openwall.com/lists/oss-security/2011/03/01/9

Resource:

mailing-list

x_refsource_MLIST

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://openwall.com/lists/oss-security/2011/02/28/5	mailing-list x_refsource_MLIST x_transferred
http://openwall.com/lists/oss-security/2011/03/01/7	mailing-list x_refsource_MLIST x_transferred
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546164	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/43533	third-party-advisory x_refsource_SECUNIA x_transferred
http://openwall.com/lists/oss-security/2011/03/01/8	mailing-list x_refsource_MLIST x_transferred
http://openwall.com/lists/oss-security/2011/02/28/12	mailing-list x_refsource_MLIST x_transferred
http://news.php.net/php.pear.cvs/61264	x_refsource_CONFIRM x_transferred
http://security-tracker.debian.org/tracker/CVE-2011-1072	x_refsource_CONFIRM x_transferred
http://openwall.com/lists/oss-security/2011/03/01/5	mailing-list x_refsource_MLIST x_transferred
http://openwall.com/lists/oss-security/2011/03/01/4	mailing-list x_refsource_MLIST x_transferred
http://www.redhat.com/support/errata/RHSA-2011-1741.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2011:187	vendor-advisory x_refsource_MANDRIVA x_transferred
http://pear.php.net/bugs/bug.php?id=18056	x_refsource_CONFIRM x_transferred
http://openwall.com/lists/oss-security/2011/02/28/3	mailing-list x_refsource_MLIST x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/65721	vdb-entry x_refsource_XF x_transferred
http://svn.php.net/viewvc?view=revision&revision=308687	x_refsource_CONFIRM x_transferred
http://pear.php.net/advisory-20110228.txt	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/46605	vdb-entry x_refsource_BID x_transferred
http://openwall.com/lists/oss-security/2011/03/01/9	mailing-list x_refsource_MLIST x_transferred