Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ini_modifier (sgid-zendtech) in Zend Platform 2.2.3 and earlier allows local users to modify the system php.ini file by editing a copy of php.ini file using the -f parameter, and then performing a symlink attack using the directory that contains the attacker-controlled php.ini file, and linking this directory to /usr/local/Zend/etc.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Zend Platform ini_modifier工具非授权操作漏洞
Vulnerability Description
Zend Platform是企业级PHP应用的运行时平台环境。 Zend Platform软件包的ini_modifier工具在使用上存在漏洞，本地攻击者可能利用此漏洞提升权限。 在安装Zend Platform过程中安装了一个名为ini_modifier的suid组二进制程序。 $ ls -la /usr/local/Zend/sbin/ini_modifier -rwxr-sr-x 1 root zendtech 243240 2006-08-14 16:24 ini_modifier 这个二进制程序
CVSS Information
N/A
Vulnerability Type
N/A