Description

The libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open_basedir protection mechanism and read arbitrary files via vectors involving a stream_close method call during use of a custom stream wrapper.

Remediation

References

CVE-2012-1171

Related Vulnerabilities

Lighttpd Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2007-4727)

WordPress Plugin Subscribe to Comments Unsubscribe Challenge Information Disclosure (2.0.2)

WordPress Plugin Stripe Payments Cross-Site Scripting (2.0.39)

LimeSurvey Improper Input Validation Vulnerability (CVE-2019-15640)

PostgreSQL Cryptographic Issues Vulnerability (CVE-2011-2483)

Severity

Medium

Classification

CVE-2012-1171 CWE-200

Tags

Missing Update Known Vulnerabilities