DescriptionUnspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safe_mode and open_basedir directives.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs336645, 336654, 354681

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
php4source(unstable)4:4.4.2-1low336645, 354681


[sarge] - php4 <no-dsa> (Safe mode violations not supported)
According to CVE, this is a safe mode violation,
therefore low impact. (According to SuSE, it's an
information leak.)

Search for package or bug name: Reporting problems