CVE-2011-1072

Published: Mar 3, 2011Modified: Apr 29, 2026

3.3

Vector

AV:L/AC:M/Au:N/C:N/I:P/A:P

Exploitability: 3.4 / Impact: 4.9

Source: NVD

Description

The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the (1) download_dir, (2) cache_dir, (3) tmp_dir, and (4) pear-build-download directories, a different vulnerability than CVE-2007-2519.

Affected (26)

Products: Php: Pear

1 product

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Php Pear	Up to 1.9.1
Php Pear	Version 0.10
Php Pear	Version 0.11
Php Pear	Version 0.2.2
Php Pear	Version 0.90
Php Pear	Version 0.9
Php Pear	Version 1.0.1
Php Pear	Version 1.0
Php Pear	Version 1.1
Php Pear	Version 1.2.1
Php Pear	Version 1.2
Php Pear	Version 1.3.1
Php Pear	Version 1.3.3.1
Php Pear	Version 1.3.3
Php Pear	Version 1.3.4
Php Pear	Version 1.3.5
Php Pear	Version 1.3.6
Php Pear	Version 1.3
Php Pear	Version 1.4.0
Php Pear	Version 1.4.0 rc1
Php Pear	Version 1.4.0 rc2
Php Pear	Version 1.4.1
Php Pear	Version 1.4.2
Php Pear	Version 1.5.0
Php Pear	Version 1.5.1
Php Pear	Version 1.6.1

Related CWEs

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (38)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546164

Source: secalert@redhat.com

http://news.php.net/php.pear.cvs/61264

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2011/02/28/12

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/02/28/3

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/02/28/5

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/03/01/4

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/03/01/5

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/03/01/7

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/03/01/8

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/03/01/9

Source: secalert@redhat.com

http://pear.php.net/advisory-20110228.txt

Source: secalert@redhat.com

Vendor Advisory

http://pear.php.net/bugs/bug.php?id=18056

Source: secalert@redhat.com

Exploit

http://secunia.com/advisories/43533

Source: secalert@redhat.com

Vendor Advisory

http://security-tracker.debian.org/tracker/CVE-2011-1072

Source: secalert@redhat.com

http://svn.php.net/viewvc?view=revision&revision=308687

Source: secalert@redhat.com

Patch

http://www.mandriva.com/security/advisories?name=MDVSA-2011:187

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2011-1741.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/46605

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/65721

Source: secalert@redhat.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546164

Source: af854a3a-2127-422b-91ae-364da2661108

http://news.php.net/php.pear.cvs/61264

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://openwall.com/lists/oss-security/2011/02/28/12

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2011/02/28/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2011/02/28/5

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2011/03/01/4

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2011/03/01/5

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2011/03/01/7

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2011/03/01/8

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2011/03/01/9

Source: af854a3a-2127-422b-91ae-364da2661108

http://pear.php.net/advisory-20110228.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://pear.php.net/bugs/bug.php?id=18056

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://secunia.com/advisories/43533

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security-tracker.debian.org/tracker/CVE-2011-1072

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.php.net/viewvc?view=revision&revision=308687

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.mandriva.com/security/advisories?name=MDVSA-2011:187

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2011-1741.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/46605

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/65721

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.