FKIE_CVE-2011-1072

Vulnerability from fkie_nvd - Published: 2011-03-03 01:00 - Updated: 2025-04-11 00:51
Severity ?
Summary
The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the (1) download_dir, (2) cache_dir, (3) tmp_dir, and (4) pear-build-download directories, a different vulnerability than CVE-2007-2519.
References
secalert@redhat.comhttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546164
secalert@redhat.comhttp://news.php.net/php.pear.cvs/61264Patch
secalert@redhat.comhttp://openwall.com/lists/oss-security/2011/02/28/12
secalert@redhat.comhttp://openwall.com/lists/oss-security/2011/02/28/3
secalert@redhat.comhttp://openwall.com/lists/oss-security/2011/02/28/5
secalert@redhat.comhttp://openwall.com/lists/oss-security/2011/03/01/4
secalert@redhat.comhttp://openwall.com/lists/oss-security/2011/03/01/5
secalert@redhat.comhttp://openwall.com/lists/oss-security/2011/03/01/7
secalert@redhat.comhttp://openwall.com/lists/oss-security/2011/03/01/8
secalert@redhat.comhttp://openwall.com/lists/oss-security/2011/03/01/9
secalert@redhat.comhttp://pear.php.net/advisory-20110228.txtVendor Advisory
secalert@redhat.comhttp://pear.php.net/bugs/bug.php?id=18056Exploit
secalert@redhat.comhttp://secunia.com/advisories/43533Vendor Advisory
secalert@redhat.comhttp://security-tracker.debian.org/tracker/CVE-2011-1072
secalert@redhat.comhttp://svn.php.net/viewvc?view=revision&revision=308687Patch
secalert@redhat.comhttp://www.mandriva.com/security/advisories?name=MDVSA-2011:187
secalert@redhat.comhttp://www.redhat.com/support/errata/RHSA-2011-1741.html
secalert@redhat.comhttp://www.securityfocus.com/bid/46605
secalert@redhat.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/65721
af854a3a-2127-422b-91ae-364da2661108http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546164
af854a3a-2127-422b-91ae-364da2661108http://news.php.net/php.pear.cvs/61264Patch
af854a3a-2127-422b-91ae-364da2661108http://openwall.com/lists/oss-security/2011/02/28/12
af854a3a-2127-422b-91ae-364da2661108http://openwall.com/lists/oss-security/2011/02/28/3
af854a3a-2127-422b-91ae-364da2661108http://openwall.com/lists/oss-security/2011/02/28/5
af854a3a-2127-422b-91ae-364da2661108http://openwall.com/lists/oss-security/2011/03/01/4
af854a3a-2127-422b-91ae-364da2661108http://openwall.com/lists/oss-security/2011/03/01/5
af854a3a-2127-422b-91ae-364da2661108http://openwall.com/lists/oss-security/2011/03/01/7
af854a3a-2127-422b-91ae-364da2661108http://openwall.com/lists/oss-security/2011/03/01/8
af854a3a-2127-422b-91ae-364da2661108http://openwall.com/lists/oss-security/2011/03/01/9
af854a3a-2127-422b-91ae-364da2661108http://pear.php.net/advisory-20110228.txtVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://pear.php.net/bugs/bug.php?id=18056Exploit
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/43533Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://security-tracker.debian.org/tracker/CVE-2011-1072
af854a3a-2127-422b-91ae-364da2661108http://svn.php.net/viewvc?view=revision&revision=308687Patch
af854a3a-2127-422b-91ae-364da2661108http://www.mandriva.com/security/advisories?name=MDVSA-2011:187
af854a3a-2127-422b-91ae-364da2661108http://www.redhat.com/support/errata/RHSA-2011-1741.html
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/46605
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/65721
Impacted products
Vendor Product Version
php pear *
php pear 0.2.2
php pear 0.9
php pear 0.10
php pear 0.11
php pear 0.90
php pear 1.0
php pear 1.0.1
php pear 1.1
php pear 1.2
php pear 1.2.1
php pear 1.3
php pear 1.3.1
php pear 1.3.3
php pear 1.3.3.1
php pear 1.3.4
php pear 1.3.5
php pear 1.3.6
php pear 1.4.0
php pear 1.4.0
php pear 1.4.0
php pear 1.4.1
php pear 1.4.2
php pear 1.5.0
php pear 1.5.1
php pear 1.6.1
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:php:pear:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C9E155D9-39F7-4758-B877-E3E0E54FDA26",
              "versionEndIncluding": "1.9.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:0.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "84D97436-9B7F-4721-9741-46440671EF13",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB3ABD1F-BCB7-412E-BF9C-3E3753E35C54",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A286382-1A8E-4A85-969E-E86B2991FD03",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "4609FA08-77D8-477F-BF06-EF1DCCF304EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:0.90:*:*:*:*:*:*:*",
              "matchCriteriaId": "85C03D94-A42D-4B94-A772-F224B7A51DBA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F2D5A6D-5F13-4170-895C-7D9766D66E92",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6E70348B-DD40-4312-BEC1-5B70DE0502F0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7183C6B-7916-4A9C-86B2-A1ADF2657FCD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "96B6D2DE-FFAA-47DD-B7F9-9D4A8AD5D86F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B18D859-6AEB-416B-AD65-549664AC7702",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "25D84F7B-61EF-4609-AA12-092A82752A73",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "3E691BDA-A3C4-4355-9B3B-CF4629234E0D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.3.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "B15572C2-8A38-47BC-B816-D38465B3DF7C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.3.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E1C78AE7-1F68-4778-B47F-3926CCD4909B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.3.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "6D2C0038-0B34-45C4-8E12-CB16E29D5A88",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.3.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "92E6FEDC-D820-4F24-855F-457201A7E108",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.3.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "B071F3AA-120E-4ED0-951B-E3E758C9B868",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "E807C846-21A6-40DA-898C-81621C917C48",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.4.0:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "E5187149-A430-4C18-A446-D63691C5DBC4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.4.0:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "17D913D2-1DEB-4899-968C-CE1EE24B0F2E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A00E459-5F1A-4A28-9B62-D7DB43F831B2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4BB7B66-B10C-42E0-BDD5-919A724D270E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "D7998B44-CABB-478C-B163-96842C8259D3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF8D84FB-E7CD-4C23-AA3B-0B41492F9939",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:php:pear:1.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2930CA3C-58D3-4DE0-969C-6B1C036A463F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the (1) download_dir, (2) cache_dir, (3) tmp_dir, and (4) pear-build-download directories, a different vulnerability than CVE-2007-2519."
    },
    {
      "lang": "es",
      "value": "El instalador de PEAR en versiones anteriores a la 1.9.2 permite a usuarios locales sobreescribir ficheros de su elecci\u00f3n a trav\u00e9s de un ataque de enlace simb\u00f3lico (\"symlink attack\") en el fichero package.xml. Relacionado con los directorios (1) download_dir, (2) cache_dir, (3) tmp_dir y (4) pear-build-download. Una vulnerabilidad distinta a la CVE-2007-2519."
    }
  ],
  "id": "CVE-2011-1072",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 3.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.4,
        "impactScore": 4.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2011-03-03T01:00:01.257",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546164"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://news.php.net/php.pear.cvs/61264"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://openwall.com/lists/oss-security/2011/02/28/12"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://openwall.com/lists/oss-security/2011/02/28/3"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://openwall.com/lists/oss-security/2011/02/28/5"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://openwall.com/lists/oss-security/2011/03/01/4"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://openwall.com/lists/oss-security/2011/03/01/5"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://openwall.com/lists/oss-security/2011/03/01/7"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://openwall.com/lists/oss-security/2011/03/01/8"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://openwall.com/lists/oss-security/2011/03/01/9"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://pear.php.net/advisory-20110228.txt"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Exploit"
      ],
      "url": "http://pear.php.net/bugs/bug.php?id=18056"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/43533"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://security-tracker.debian.org/tracker/CVE-2011-1072"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://svn.php.net/viewvc?view=revision\u0026revision=308687"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:187"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-1741.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/bid/46605"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65721"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546164"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://news.php.net/php.pear.cvs/61264"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://openwall.com/lists/oss-security/2011/02/28/12"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://openwall.com/lists/oss-security/2011/02/28/3"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://openwall.com/lists/oss-security/2011/02/28/5"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://openwall.com/lists/oss-security/2011/03/01/4"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://openwall.com/lists/oss-security/2011/03/01/5"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://openwall.com/lists/oss-security/2011/03/01/7"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://openwall.com/lists/oss-security/2011/03/01/8"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://openwall.com/lists/oss-security/2011/03/01/9"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://pear.php.net/advisory-20110228.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://pear.php.net/bugs/bug.php?id=18056"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/43533"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security-tracker.debian.org/tracker/CVE-2011-1072"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://svn.php.net/viewvc?view=revision\u0026revision=308687"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:187"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2011-1741.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/46605"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65721"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-59"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.