CVE-2011-1144

CVE-2011-1144 describes a local privilege escalation vulnerability in PEAR installer versions 1.9.2 and earlier, affecting PHP PEAR. An attacker can exploit this by using a symlink attack on the package.xml file, specifically targeting the download_dir, cache_dir, tmp_dir, and pear-build-download directories, to overwrite arbitrary files. The vulnerability has a CVSS score of 3.3 (medium severity), indicating a low attack complexity and requiring local access, with potential impacts on integrity and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.