suPHP before 0.6.3 allows local users to gain privileges via (1) a race condition that involves multiple symlink changes to point a file owned by a different user, or (2) a symlink to the directory of a different user, which is used to determine privileges.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Suphp | Sebastian_marsching | * | 0.6.2 (including) |
Suphp | Ubuntu | dapper | * |
Suphp | Ubuntu | devel | * |
Suphp | Ubuntu | edgy | * |
Suphp | Ubuntu | feisty | * |
Suphp | Ubuntu | gutsy | * |
Suphp | Ubuntu | hardy | * |
Suphp | Ubuntu | intrepid | * |
Suphp | Ubuntu | jaunty | * |
Suphp | Ubuntu | karmic | * |
Suphp | Ubuntu | upstream | * |