Red Hat Security Advisory

RHSA-2011:1741

php-pear security and bug fix update

Released 2011-12-05 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 6) php-pear-1:1.9.4-4.el6
Red Hat Enterprise Linux Workstation (v. 6) php-pear-1:1.9.4-4.el6

Fixes 1 record

TI-2011-00925 CVE-2011-1072 · GHSA-pm7p-73v9-hmx9

The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a…

LOW 17

The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the (1) download_dir, (2) cache_dir, (3) tmp_dir, and (4) pear-build-download di…

CVSS 2.0LOW 3.3 Local No auth Interaction — EPSS 0.00477 Published 2011-03-03 Fixed CWE-59