CVE-2007-5900

NameCVE-2007-5900
DescriptionPHP before 5.2.5 allows local users to bypass protection mechanisms configured through php_admin_value or php_admin_flag in httpd.conf by using ini_set to modify arbitrary configuration variables, a different issue than CVE-2006-4625.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)

Notes

Apparently a dupe of CVE-2007-4659 due to temporary revoke of the patch
from CVS and later re-introduction
https://bugs.php.net/bug.php?id=41561

Search for package or bug name: Reporting problems