CVE-2007-0905

Publication date 13 February 2007

Last updated 17 July 2025

Ubuntu priority

Description

PHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir restrictions via unspecified vectors in the session extension. NOTE: it is possible that this issue is a duplicate of CVE-2006-6383.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
php5	7.04 feisty	Fixed 5.2.1-0ubuntu1.4
	6.10 edgy	Not affected
	6.06 LTS dapper	Not affected

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Other references

https://www.cve.org/CVERecord?id=CVE-2007-0905