PHP 4.4.2 and 5.1 allows for a safe mode bypass via the copy() function.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45436/copy-php-safe.txt
Source: https://packetstormsecurity.com/files/45436/copy-php-safe.txt.html