CVE-2009-2626
PHP < 5.2.10 - Memory Disclosure and Denial of Service via ini_set and ini_restore
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2009-2626. PoCs published by Maksymilian Arciemowicz.
AI-analyzed exploit summary The exploit demonstrates an information disclosure vulnerability in PHP 5.2.10 and 5.3 by manipulating `ini_set` and `ini_restore` to bypass intended restrictions, potentially leaking sensitive configuration details.
Description
The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore function to restore the variable.
Exploits (3)
The exploit demonstrates an information disclosure vulnerability in PHP 5.2.10 and 5.3 by manipulating `ini_set` and `ini_restore` to bypass intended restrictions, potentially leaking sensitive configuration details.
This exploit demonstrates an information disclosure vulnerability in PHP (CVE-2009-2626) by manipulating the 'open_basedir' setting to bypass restrictions and include arbitrary files. The PoC shows how an attacker can reset the 'open_basedir' directive after setting it, potentially leading to unauthorized file access.
This exploit leverages a PHP session path vulnerability (CVE-2009-2626) to disclose sensitive information by manipulating the session.save_path directive. The PoC demonstrates how an attacker can exploit this to gain unauthorized access to session data.