<?php
/*
   +----------------------------------------------------------------------+
   | PEAR Web site version 1.0                                            |
   +----------------------------------------------------------------------+
   | Copyright (c) 2001-2005 The PHP Group                                |
   +----------------------------------------------------------------------+
   | This source file is subject to version 2.02 of the PHP license,      |
   | that is bundled with this package in the file LICENSE, and is        |
   | available at through the world-wide-web at                           |
   | http://www.php.net/license/2_02.txt.                                 |
   | If you did not receive a copy of the PHP license and are unable to   |
   | obtain it through the world-wide-web, please send a note to          |
   | license@php.net so we can mail you a copy immediately.               |
   +----------------------------------------------------------------------+
   | Authors: Martin Jansen                                               |
   +----------------------------------------------------------------------+
   $Id: vulnerability2.php 266315 2008-09-15 04:32:03Z dufuz $
*/

response_header('Arbitrary File Overwrite Vulnerability in the PEAR Installer');
?>
<h1>Arbitrary File Overwrite Vulnerability in the PEAR Installer</h1>

[May 8, 2007]

<div id="news-entry">
 <p>
  On May 6, 2007 a <strong>serious vulnerability in the PEAR installer</strong>
  has been discovered and fixed.  One is strongly encouraged to
  upgrade to version 1.5.4.  Details about the issue are
  <a href="/advisory-20070507.txt">available here</a>.
 </p>

 <p>
  This vulnerability is assigned candidate CVE <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2519">CVE-2007-2519</a>.
 </p>
</div>

<?php
response_footer();