FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

php5-sqlite -- open_basedir bypass

Affected packages
5.2	<=	php5-sqlite	<	5.2.17_11
5.3	<=	php5-sqlite	<	5.3.15
		php52-sqlite	<	5.2.17_11
		php53-sqlite	<	5.3.15

Details

VuXML ID	ec255bd8-02c6-11e2-92d1-000d601460a4
Discovery	2012-06-14
Entry	2012-09-19

MITRE CVE team reports:

The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via unspecified vectors.

[source]

References

CVE Name	CVE-2012-3365
URL	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3365