The libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open_basedir protection mechanism and read arbitrary files via vectors involving a stream_close method call during use of a custom stream wrapper.
CPE | Name | Operator | Version |
---|---|---|---|
php | eq | 5.5.0 alpha1 | |
php | eq | 5.5.0 alpha3 | |
php | eq | 5.2.9 | |
php | eq | 5.4.12 rc1 | |
php | eq | 5.3.10 | |
php | eq | 5.3.27 | |
php | eq | 5.1.5 | |
php | eq | 5.4.15 rc1 | |
php | eq | 5.5.0 beta3 | |
php | eq | 5.3.6 |