CVE-2007-2519
PEAR 1.0-1.5.3 - Directory Traversal via Package.xml Install Attribute
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-2519. PoCs published by Gregory Beaver.
AI-analyzed exploit summary This exploit leverages a directory traversal vulnerability in PEAR's package installation mechanism. By crafting a malicious package.xml file with a traversal sequence in the 'install-as' attribute, an attacker can overwrite arbitrary files on the system during package installation.
Description
Directory traversal vulnerability in the installer in PEAR 1.0 through 1.5.3 allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in the (1) install-as attribute in the file element in package.xml 1.0 or the (2) as attribute in the install element in package.xml 2.0. NOTE: it could be argued that this does not cross privilege boundaries in typical installations, since the code being installed could perform the same actions.
Exploits (1)
This exploit leverages a directory traversal vulnerability in PEAR's package installation mechanism. By crafting a malicious package.xml file with a traversal sequence in the 'install-as' attribute, an attacker can overwrite arbitrary files on the system during package installation.