VULNERABILITY INTELLIGENCE

CVE-2007-1370

CVSS score6.2 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2007-03-09
Last modified2026-06-16
CVSS vectorAV:L/AC:H/Au:N/C:C/I:C/A:C

Description

Zend Platform 2.2.3 and earlier has incorrect ownership for scd.sh and certain other files, which allows local users to gain root privileges by modifying the files. NOTE: this only occurs when safe_mode and open_basedir are disabled; other settings require leverage for other vulnerabilities.

Primary references