suPHP before 0.6.3 allows local users to gain privileges via (1) a race condition that involves multiple symlink changes to point a file owned by a different user, or (2) a symlink to the directory of a different user, which is used to determine privileges.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Suphp | Sebastian_marsching | * | 0.6.2 (including) |