3.3
CVSSv2

CVE-2010-3691

Published: 07/10/2010 Updated: 21/11/2024

Vulnerability Summary

PGTStorage/pgt-file.php in phpCAS prior to 1.1.3, when proxy mode is enabled, allows local users to overwrite arbitrary files via a symlink attack on an unspecified file.

Vulnerable Product Search on Vulmon Subscribe to Product

apereo phpcas

apereo phpcas 0.2

apereo phpcas 0.3

apereo phpcas 0.3.1

apereo phpcas 0.3.2

apereo phpcas 0.4

apereo phpcas 0.4.1

apereo phpcas 0.4.8

apereo phpcas 0.4.9

apereo phpcas 0.4.10

apereo phpcas 0.4.11

apereo phpcas 0.4.12

apereo phpcas 0.4.13

apereo phpcas 0.4.14

apereo phpcas 0.4.15

apereo phpcas 0.4.16

apereo phpcas 0.4.17

apereo phpcas 0.4.18

apereo phpcas 0.4.19

apereo phpcas 0.4.20

apereo phpcas 0.4.21

apereo phpcas 0.4.22

apereo phpcas 0.4.23

apereo phpcas 0.5.0

apereo phpcas 0.5.1

apereo phpcas 0.6.0

apereo phpcas 1.0.0

apereo phpcas 1.0.1

apereo phpcas 1.1.0

apereo phpcas 1.1.1

Vendor Advisories

Several vulnerabilties have been discovered in phpCAS, a CAS client library for PHP The Moodle course management system includes a copy of phpCAS For the oldstable distribution (lenny), this problem has been fixed in version 1813-3 The stable distribution (squeeze) already contains a fixed version of phpCAS The unstable distribution (sid) alr ...