Unrated severityNVD Advisory· Published Jun 20, 2008· Updated Jun 16, 2026
CVE-2008-2665
CVE-2008-2665
Description
Directory traversal vulnerability in the posix_access function in PHP 5.2.6 and earlier allows remote attackers to bypass safe_mode restrictions via a .. (dot dot) in an http URL, which results in the URL being canonicalized to a local filename after the safe_mode check has successfully run.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
17- securityreason.com/achievement_securityalert/54nvdExploit
- www.us-cert.gov/cas/techalerts/TA09-133A.htmlnvdUS Government Resource
- lists.apple.com/archives/security-announce/2009/May/msg00002.htmlnvd
- marc.infonvd
- marc.infonvd
- secunia.com/advisories/32746nvd
- secunia.com/advisories/35074nvd
- secunia.com/advisories/35650nvd
- security.gentoo.org/glsa/glsa-200811-05.xmlnvd
- securityreason.com/securityalert/3941nvd
- support.apple.com/kb/HT3549nvd
- wiki.rpath.com/Advisories:rPSA-2009-0035nvd
- www.securityfocus.com/archive/1/501376/100/0/threadednvd
- www.securityfocus.com/bid/29797nvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2009/1297nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/43196nvd
News mentions
0No linked articles in our index yet.