CVE-2008-1614 Race condition in n/a
Local attackers can exploit a race condition in suPHP to gain elevated privileges by manipulating symlinks during file ownership checks.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-1614?
CVE-2008-1614 is a medium-severity vulnerability in n/a, published on 2 Apr 2008. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
suPHP before 0.6.3 allows local users to gain privileges via (1) a race condition that involves multiple symlink changes to point a file owned by a different user, or (2) a symlink to the directory of a different user, which is used to determine privileges.
Weakness: CWE-264
Which versions are affected by CVE-2008-1614?
It affects 1 product.
Products include Sebastian Marsching Suphp.
How do I fix CVE-2008-1614?
Upgrade to a fixed version.
Is CVE-2008-1614 being exploited?
There is no known exploitation of CVE-2008-1614 in the wild and no public exploit code.
Sources
Also known as DSA-1550-1, DTSA-124-1, GHSA-gfvq-hmw3-p3q3.