CVE-2007-2519

Directory traversal vulnerability in the installer in PEAR 1.0 through 1.5.3 allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in the (1) install-as attribute in the file element in package.xml 1.0 or the (2) as attribute in the install element in package.xml 2.0. NOTE: it could be argued that this does not cross privilege boundaries in typical installations, since the code being installed could perform the same actions.

• http://osvdb.org/42108
• http://pear.php.net/advisory-20070507.txtExploit, Patch, Vendor Advisory
• http://pear.php.net/news/vulnerability2.php
• http://secunia.com/advisories/25372
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:110
• http://www.securityfocus.com/bid/24111
• http://www.ubuntu.com/usn/usn-462-1
• http://www.vupen.com/english/advisories/2007/1926
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34482
• http://osvdb.org/42108
• http://pear.php.net/advisory-20070507.txtExploit, Patch, Vendor Advisory
• http://pear.php.net/news/vulnerability2.php
• http://secunia.com/advisories/25372
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:110
• http://www.securityfocus.com/bid/24111
• http://www.ubuntu.com/usn/usn-462-1
• http://www.vupen.com/english/advisories/2007/1926
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34482

Published

May 22, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2510Buffer overflow in the make_http_soap_request function in PH…
• CVE-2007-2511Buffer overflow in the user_filter_factory_create function i…
• CVE-2007-2512Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise…
• CVE-2007-2513Novell GroupWise 7 before SP2 20070524, and GroupWise 6 befo…
• CVE-2007-2514Stack-based buffer overflow in XferWan.exe as used in multip…
• CVE-2007-2518Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2007-2520SQL injection vulnerability in admin.php in MyNews 0.10, whe…
• CVE-2007-2521PHP remote file inclusion vulnerability in common.php in E-G…
• CVE-2007-2522Stack-based buffer overflow in the inoweb Console Server in …
• CVE-2007-2523CA Anti-Virus for the Enterprise r8 and Threat Manager r8 be…
• CVE-2007-2524Cross-site scripting (XSS) vulnerability in index.pl in Open…
• CVE-2007-2525Memory leak in the PPP over Ethernet (PPPoE) socket implemen…