CVE-2011-1144 in PEAR
요약 (영어)
The installer in PEAR 1.9.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the (1) download_dir, (2) cache_dir, (3) tmp_dir, and (4) pear-build-download directories. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1072.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
예약하다
2011. 03. 02.
공개
2011. 03. 02.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 56700 | PEAR Installer 권한 상승 | 59 | 정의되지 않음 | 정의되지 않음 | CVE-2011-1144 |