*** This bug is a security vulnerability ***
Public security bug reported:
CVE-2008-1614 appears to affect all releases:
"suPHP before 0.6.3 allows local users to gain privileges via (1) a race
condition that involves multiple symlink changes to point a file owned
by a different user, or (2) a symlink to the directory of a different
user, which is used to determine privileges."
** Affects: suphp (Ubuntu)
Importance: High
Status: Confirmed
** Affects: suphp (Ubuntu Dapper)
Importance: Undecided
Status: New
** Affects: suphp (Ubuntu Edgy)
Importance: Undecided
Status: New
** Affects: suphp (Ubuntu Feisty)
Importance: Undecided
Status: New
** Affects: suphp (Ubuntu Gutsy)
Importance: Undecided
Status: New
** Affects: suphp (Ubuntu Hardy)
Importance: High
Status: Confirmed
** Affects: suphp (Debian)
Importance: Unknown
Status: Unknown
** Visibility changed to: Public
** Changed in: suphp (Ubuntu Hardy)
Importance: Undecided => High
Status: New => Confirmed
** Bug watch added: Debian Bug tracker #475431
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475431
** Also affects: suphp (Debian) via
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475431
Importance: Unknown
Status: Unknown
--
[CVE-2008-1614] privilege escalation via symlink attack
https://bugs.launchpad.net/bugs/216245
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
