Vulnerability in Sebastian Marsching Suphp

CVE-2008-1614

suPHP before 0.6.3 allows local users to gain privileges via (1) a race condition that involves multiple symlink changes to point a file owned by a different user, or (2) a symlink to the directory of a different user, which is used to determine privileges.

EPSS: 0.003 (25.3th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References