Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-1369. PoCs published by Stefan Esser.
AI-analyzed exploit summary This exploit leverages a local privilege escalation vulnerability in Zend Platform by manipulating the 'ini_modifier' program to modify the PHP configuration file ('php.ini') without proper authentication. The attacker can inject a malicious Zend extension, which will be executed with root privileges upon webserver restart.
Description
ini_modifier (sgid-zendtech) in Zend Platform 2.2.3 and earlier allows local users to modify the system php.ini file by editing a copy of php.ini file using the -f parameter, and then performing a symlink attack using the directory that contains the attacker-controlled php.ini file, and linking this directory to /usr/local/Zend/etc.
Exploits (1)
This exploit leverages a local privilege escalation vulnerability in Zend Platform by manipulating the 'ini_modifier' program to modify the PHP configuration file ('php.ini') without proper authentication. The attacker can inject a malicious Zend extension, which will be executed with root privileges upon webserver restart.