rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that causes the $_FILES array to be modified.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Php | Php | * | 5.0.2 (including) |
| Red Hat Enterprise Linux 3 | RedHat | php-0:4.3.2-19.ent | * |
| Php4 | Ubuntu | dapper | * |
| Php4 | Ubuntu | edgy | * |
| Php5 | Ubuntu | dapper | * |
| Php5 | Ubuntu | devel | * |
| Php5 | Ubuntu | edgy | * |
| Php5 | Ubuntu | feisty | * |