Security Advisory
CVE-2006-1494
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function.