Secunia Security Advisory – A vulnerability has been reported in PEAR, which can be exploited by malicious people to bypass certain security restrictions. The vulnerability is caused due to a design error in the PEAR installer. This can be exploited by a package that is installed using the PEAR installer to execute arbitrary PHP code when the pear command is executed or the Web/Gtk frontend is loaded. Successful exploitation requires that the user has installed a malicious package using the PEAR installer, or installed a package that depends on a malicious package. The vulnerability has been reported in version 1.4.2 and prior.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41590/sa17563.txt
Source: https://packetstormsecurity.com/files/41590/Secunia-Security-Advisory-17563.html