Paths with NULL in them (foo\0bar.txt) are now considered as invalid (CVE-2006-7243).
--The php52 backports maintainer reports that this issue is unlikely - to be fixed in 5.2 due to design roadblocks. Users are strongly - encouraged to upgrade as soon as possible.
-