CVE-2007-3378
The (1) session_save_path, (2) ini_set, and (3) error_log functions in PHP 4.4.7 and earlier, and...
The (1) session_save_path, (2) ini_set, and (3) error_log functions in PHP 4.4.7 and earlier, and PHP 5 5.2.3 and earlier, when invoked from a .htaccess file, allow remote attackers to bypass safe_mode and open_basedir restrictions and possibly execute arbitrary commands, as demonstrated using (a) php_value, (b) php_flag, and (c) directives in .htaccess.
Exploit likelihood
What each source reports
NVD Score used
The (1) session_save_path, (2) ini_set, and (3) error_log functions in PHP 4.4.7 and earlier, and PHP 5 5.2.3 and earlier, when invoked from a .htaccess file, allow remote attackers to bypass safe_mode and open_basedir restrictions and possibly execute arbitrary commands, as demonstrated using (a) php_value, (b) php_flag, and (c) directives in .htaccess.
- Record
CVE-2007-3378- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The (1) session_save_path, (2) ini_set, and (3) error_log functions in PHP 4.4.7 and earlier, and PHP 5 5.2.3 and earlier, when invoked from a .htaccess file, allow remote attackers to bypass safe_mode and open_basedir restrictions and possibly execute arbitrary commands, as demonstrated using (a) php_value, (b) php_flag, and (c) directives in .htaccess.
- Record
CVE-2007-3378- Updated
- 2026-11-02
EUVDEUVD-2007-3368 No score
The (1) session_save_path, (2) ini_set, and (3) error_log functions in PHP 4.4.7 and earlier, and PHP 5 5.2.3 and earlier, when invoked from a .htaccess file, allow remote attackers to bypass safe_mode and open_basedir restrictions and possibly execute arbitrary commands, as demonstrated using (a) php_value, (b) php_flag, and (c) directives in .htaccess.
- Record
EUVD-2007-3368- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jjgw-mx44-pv3c No score
The (1) session_save_path, (2) ini_set, and (3) error_log functions in PHP 4.4.7 and earlier, and...
The (1) session_save_path, (2) ini_set, and (3) error_log functions in PHP 4.4.7 and earlier, and PHP 5 5.2.3 and earlier, when invoked from a .htaccess file, allow remote attackers to bypass safe_mode and open_basedir restrictions and possibly execute arbitrary commands, as demonstrated using (a) php_value, (b) php_flag, and (c) directives in .htaccess.
- Record
GHSA-jjgw-mx44-pv3c- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3378 is a medium vulnerability (CVSS 6.8) in Php, published June 29, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.33%, the 92nd percentile. No source names a fixed version.
References
securityreason.com/securityalert/2831
php.net/ChangeLog-5.php
secunia.com/advisories/26822
vupen.com/english/advisories/2008/0059
exchange.xforce.ibmcloud.com/vulnerabilities/39403
Show 38 moreShow less
gentoo.org/security/en/glsa/glsa-200710-02.xml
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136
trustix.org/errata/2007/0026
lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
issues.rpath.com/browse/RPL-1693
securityfocus.com/archive/1/491693/100/0/threaded
docs.info.apple.com/article.html?artnum=307562
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6056
osvdb.org/38682
openwall.com/lists/oss-security/2020/09/17/3
seclists.org/fulldisclosure/2020/Sep/34
nvd.nist.gov/vuln/detail/CVE-2007-3378
github.com/advisories/GHSA-jjgw-mx44-pv3c