Description (CNA)
The imap_body function in PHP before 4.4.4 does not implement safemode or open_basedir checks, which allows local users to read arbitrary files or list arbitrary directory contents.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.osvdb.org/28005
- http://secunia.com/advisories/21546
- http://us2.php.net/ChangeLog-4.php#4.4.4
- http://bugs.php.net/bug.php?id=37265
ADP enrichment
No English description supplied.