Title: PHP SAPI php_getuid() Function Security Restriction Bypass

Unknown or Incomplete

• CVE ID: 2008-5624 (see also: NVD)
• Bugtraq ID: 32688
• Secunia Advisory ID: 35003 35650 38090 38669
• ISS X-Force ID: 47318
• Other Advisory URL: HPSBUX02431 SSRT090085: http://securityreason.com/achievement_securityalert/59
  http://www.mandriva.com/security/advisories?name=MDVSA-2009:045
• Keyword: HPSBUX02431, SSRT090085, c01756421
• Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2008-12/0067.html
  http://archives.neohapsis.com/archives/bugtraq/2008-12/0073.html
  http://archives.neohapsis.com/archives/bugtraq/2008-12/0076.html
  http://archives.neohapsis.com/archives/bugtraq/2008-12/0077.html
  http://archives.neohapsis.com/archives/bugtraq/2009-07/0008.html
• Vendor Specific News/Changelog Entry: http://cvs.php.net/viewvc.cgi/php-src/ext/standard/basic_functions.c?r1=1.725.2.31.2.78&r2=1.725.2.31.2.79&diff_format=u
  http://cvs.php.net/viewvc.cgi/php-src/NEWS?r1=1.2027.2.547.2.1340&r2=1.2027.2.547.2.1341&diff_format=u
  http://cvs.php.net/viewvc.cgi/php-src/sapi/apache/mod_php5.c?r1=1.19.2.7.2.15&r2=1.19.2.7.2.16&diff_format=u
  http://lists.debian.org/debian-security-announce/2009/msg00100.html
  http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00008.html
  http://wiki.rpath.com/Advisories:rPSA-2009-0035
  http://www.php.net/ChangeLog-5.php#5.2.7
• Vendor Specific Advisory URL: http://www.gentoo.org/security/en/glsa/glsa-201001-03.xml
  http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01756421
• Vendor URL: http://www.php.net/

Unknown or Incomplete