php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Sec Bug #55761 System php functions do not respect open_basedir allowed paths
Submitted: 2011-09-22 09:26 UTC Modified: 2011-09-22 09:36 UTC
From: enrico dot simonetti at gmail dot com Assigned:
Status: Not a bug Package: Safe Mode/open_basedir
PHP Version: 5.3.8 OS: Linux 2.6.35-30-generic
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: enrico dot simonetti at gmail dot com
New email:
PHP Version: OS:

 

 [2011-09-22 09:26 UTC] enrico dot simonetti at gmail dot com
Description:
------------
On Apache I have:

<Directory "/var/www/sample/locked">
php_admin_value open_basedir "/var/www/sample/locked"
</Directory>

The test script will be located on /var/www/sample/locked/test.php

It will try to read with a system() call something outside my open_basedir scope.

Eg: system('ls -la ../');



Test script:
---------------
<?php

system('ls -la ../');

system('cat ../disallowedfolder/credentials.php');

Expected result:
----------------
I should not see any output.

Actual result:
--------------
I can list the folders on the path outside my open_basedir

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2011-09-22 09:36 UTC] pajoye@php.net
-Status: Open +Status: Bogus
 [2011-09-22 09:36 UTC] pajoye@php.net
Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to report
a bug at http://bugs.php.net/how-to-report.php

PHP only controls its own file access, not external applications.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Fri Dec 13 04:01:27 2024 UTC