Vulnerability Database

290,020

Total vulnerabilities in the database

CVE-2007-1370

Zend Platform 2.2.3 and earlier has incorrect ownership for scd.sh and certain other files, which allows local users to gain root privileges by modifying the files. NOTE: this only occurs when safe_mode and open_basedir are disabled; other settings require leverage for other vulnerabilities.

  • Published: Mar 9, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2007-1370
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.2
  • AV:L/AC:H/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.