Unrated severityNVD Advisory· Published Mar 26, 2010· Updated Jun 16, 2026
CVE-2010-1129
CVE-2010-1129
Description
The safe_mode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / (slash) character, which allows context-dependent attackers to bypass intended access restrictions via vectors related to use of the tempnam function.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
14cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*+ 13 more
- cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.2.12:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*
- (no CPE)range: <5.2.13
Patches
Vulnerability mechanics
References
11- www.php.net/releases/5_2_13.phpnvdPatch
- secunia.com/advisories/38708nvdVendor Advisory
- www.vupen.com/english/advisories/2010/0479nvdVendor Advisory
- itrc.hp.com/service/cki/docDisplay.donvd
- lists.apple.com/archives/security-announce/2010//Aug/msg00003.htmlnvd
- secunia.com/advisories/40551nvd
- securitytracker.com/idnvd
- support.apple.com/kb/HT4312nvd
- www.php.net/ChangeLog-5.phpnvd
- www.securityfocus.com/bid/38431nvd
- www.vupen.com/english/advisories/2010/1796nvd
News mentions
0No linked articles in our index yet.