Vulnerability-Lookup

OPENSUSE-SU-2024:11167-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2026-09-20 20:12

Summary

php7-7.4.24-1.1 on GA media

Severity

Moderate

Notes

Title of the patch: php7-7.4.24-1.1 on GA media

Description of the patch: These are all security issues fixed in the php7-7.4.24-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2024-11167

CVE-2005-3353

Affected products

Recommended 196 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:php7-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-bcmath-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-bcmath-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-bcmath-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-bcmath-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-bz2-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-bz2-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-bz2-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-bz2-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-calendar-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-calendar-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-calendar-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-calendar-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-cli-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-cli-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-cli-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-cli-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-ctype-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-ctype-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-ctype-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-ctype-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-curl-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-curl-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-curl-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-curl-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-dba-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-dba-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-dba-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-dba-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-devel-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-devel-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-devel-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-devel-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-dom-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-dom-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-dom-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-dom-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-enchant-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-enchant-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-enchant-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-enchant-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-exif-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-exif-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-exif-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-exif-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-fileinfo-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-fileinfo-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-fileinfo-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-fileinfo-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-ftp-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-ftp-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-ftp-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-ftp-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-gd-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-gd-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-gd-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-gd-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-gettext-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-gettext-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-gettext-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-gettext-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-gmp-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-gmp-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-gmp-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-gmp-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-iconv-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-iconv-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-iconv-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-iconv-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-intl-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-intl-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-intl-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-intl-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-json-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-json-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-json-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-json-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-ldap-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-ldap-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-ldap-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-ldap-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-mbstring-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-mbstring-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-mbstring-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-mbstring-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-mysql-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-mysql-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-mysql-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-mysql-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-odbc-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-odbc-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-odbc-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-odbc-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-opcache-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-opcache-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-opcache-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-opcache-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-openssl-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-openssl-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-openssl-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-openssl-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-pcntl-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-pcntl-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-pcntl-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-pcntl-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-pdo-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-pdo-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-pdo-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-pdo-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-pgsql-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-pgsql-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-pgsql-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-pgsql-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-phar-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-phar-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-phar-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-phar-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-posix-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-posix-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-posix-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-posix-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-readline-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-readline-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-readline-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-readline-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-shmop-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-shmop-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-shmop-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-shmop-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-snmp-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-snmp-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-snmp-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-snmp-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-soap-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-soap-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-soap-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-soap-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sockets-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sockets-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sockets-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sockets-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sodium-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sodium-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sodium-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sodium-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sqlite-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sqlite-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sqlite-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sqlite-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sysvmsg-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sysvmsg-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sysvmsg-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sysvmsg-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sysvsem-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sysvsem-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sysvsem-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sysvsem-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sysvshm-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sysvshm-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sysvshm-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-sysvshm-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-tidy-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-tidy-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-tidy-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-tidy-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-tokenizer-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-tokenizer-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-tokenizer-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-tokenizer-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-xmlreader-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-xmlreader-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-xmlreader-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-xmlreader-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-xmlrpc-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-xmlrpc-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-xmlrpc-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-xmlrpc-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-xmlwriter-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-xmlwriter-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-xmlwriter-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-xmlwriter-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-xsl-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-xsl-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-xsl-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-xsl-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-zip-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-zip-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-zip-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-zip-0:7.4.24-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-zlib-0:7.4.24-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-zlib-0:7.4.24-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-zlib-0:7.4.24-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:php7-zlib-0:7.4.24-1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2005-3388

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2005-3389

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2005-3390

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact important

CVE-2005-3391

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2005-3392

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact important

CVE-2006-0996

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2006-1017

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2006-1490

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2006-1494

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact low

CVE-2006-1991

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2007-4783

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2007-4887

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2008-0599

9.8 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact critical

CVE-2017-9120

4 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact low

CVE-2018-1000222

7 (High)


                
                  CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2018-1000888

8.8 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact important

CVE-2018-12882

6.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2018-14851

3.7 (Low)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact low

CVE-2018-17082

6.1 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2018-19935

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact low

CVE-2018-20783

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2019-11034

4.8 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2019-11035

4.8 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2019-11036

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2019-11039

4 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact low

CVE-2019-11040

4.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2019-11041

8.8 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2019-11042

5.4 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2019-11043

8.1 (High)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2019-11046

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2019-9020

4.8 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2019-9021

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact low

CVE-2019-9022

6.5 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2019-9023

5.1 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2019-9024

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2019-9637

3.1 (Low)


                
                  CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact low

CVE-2019-9638

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2019-9640

3.3 (Low)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact low

CVE-2019-9641

4.4 (Medium)


                
                  CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2019-9675

5.3 (Medium)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2020-7062

2.5 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact low

CVE-2020-7063

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

CVE-2021-21706

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Recommended 196 products, the same list as for CVE-2005-3353

Threats

Impact moderate

References

168 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2005-3353/	self
https://www.suse.com/security/cve/CVE-2005-3388/	self
https://www.suse.com/security/cve/CVE-2005-3389/	self
https://www.suse.com/security/cve/CVE-2005-3390/	self
https://www.suse.com/security/cve/CVE-2005-3391/	self
https://www.suse.com/security/cve/CVE-2005-3392/	self
https://www.suse.com/security/cve/CVE-2006-0996/	self
https://www.suse.com/security/cve/CVE-2006-1017/	self
https://www.suse.com/security/cve/CVE-2006-1490/	self
https://www.suse.com/security/cve/CVE-2006-1494/	self
https://www.suse.com/security/cve/CVE-2006-1991/	self
https://www.suse.com/security/cve/CVE-2007-4783/	self
https://www.suse.com/security/cve/CVE-2007-4887/	self
https://www.suse.com/security/cve/CVE-2008-0599/	self
https://www.suse.com/security/cve/CVE-2017-9120/	self
https://www.suse.com/security/cve/CVE-2018-1000222/	self
https://www.suse.com/security/cve/CVE-2018-1000888/	self
https://www.suse.com/security/cve/CVE-2018-12882/	self
https://www.suse.com/security/cve/CVE-2018-14851/	self
https://www.suse.com/security/cve/CVE-2018-17082/	self
https://www.suse.com/security/cve/CVE-2018-19935/	self
https://www.suse.com/security/cve/CVE-2018-20783/	self
https://www.suse.com/security/cve/CVE-2019-11034/	self
https://www.suse.com/security/cve/CVE-2019-11035/	self
https://www.suse.com/security/cve/CVE-2019-11036/	self
https://www.suse.com/security/cve/CVE-2019-11039/	self
https://www.suse.com/security/cve/CVE-2019-11040/	self
https://www.suse.com/security/cve/CVE-2019-11041/	self
https://www.suse.com/security/cve/CVE-2019-11042/	self
https://www.suse.com/security/cve/CVE-2019-11043/	self
https://www.suse.com/security/cve/CVE-2019-11046/	self
https://www.suse.com/security/cve/CVE-2019-9020/	self
https://www.suse.com/security/cve/CVE-2019-9021/	self
https://www.suse.com/security/cve/CVE-2019-9022/	self
https://www.suse.com/security/cve/CVE-2019-9023/	self
https://www.suse.com/security/cve/CVE-2019-9024/	self
https://www.suse.com/security/cve/CVE-2019-9637/	self
https://www.suse.com/security/cve/CVE-2019-9638/	self
https://www.suse.com/security/cve/CVE-2019-9640/	self
https://www.suse.com/security/cve/CVE-2019-9641/	self
https://www.suse.com/security/cve/CVE-2019-9675/	self
https://www.suse.com/security/cve/CVE-2020-7062/	self
https://www.suse.com/security/cve/CVE-2020-7063/	self
https://www.suse.com/security/cve/CVE-2021-21706/	self
https://www.suse.com/security/cve/CVE-2005-3353	external
https://bugzilla.suse.com/118976	external
https://bugzilla.suse.com/120087	external
https://bugzilla.suse.com/130227	external
https://bugzilla.suse.com/131578	external
https://bugzilla.suse.com/131579	external
https://bugzilla.suse.com/131580	external
https://bugzilla.suse.com/132684	external
https://bugzilla.suse.com/135480	external
https://bugzilla.suse.com/529198	external
https://www.suse.com/security/cve/CVE-2005-3388	external
https://bugzilla.suse.com/120087	external
https://bugzilla.suse.com/131578	external
https://bugzilla.suse.com/131579	external
https://bugzilla.suse.com/131580	external
https://bugzilla.suse.com/132684	external
https://www.suse.com/security/cve/CVE-2005-3389	external
https://bugzilla.suse.com/118976	external
https://bugzilla.suse.com/120087	external
https://bugzilla.suse.com/130227	external
https://bugzilla.suse.com/131578	external
https://bugzilla.suse.com/131579	external
https://bugzilla.suse.com/131580	external
https://bugzilla.suse.com/132684	external
https://bugzilla.suse.com/135480	external
https://bugzilla.suse.com/307272	external
https://www.suse.com/security/cve/CVE-2005-3390	external
https://bugzilla.suse.com/118976	external
https://bugzilla.suse.com/120087	external
https://bugzilla.suse.com/130227	external
https://bugzilla.suse.com/131578	external
https://bugzilla.suse.com/131579	external
https://bugzilla.suse.com/131580	external
https://bugzilla.suse.com/132684	external
https://bugzilla.suse.com/135480	external
https://www.suse.com/security/cve/CVE-2005-3391	external
https://bugzilla.suse.com/131580	external
https://bugzilla.suse.com/135673	external
https://www.suse.com/security/cve/CVE-2005-3392	external
https://bugzilla.suse.com/131580	external
https://bugzilla.suse.com/135673	external
https://www.suse.com/security/cve/CVE-2006-0996	external
https://bugzilla.suse.com/164804	external
https://bugzilla.suse.com/164845	external
https://www.suse.com/security/cve/CVE-2006-1017	external
https://bugzilla.suse.com/154317	external
https://bugzilla.suse.com/279863	external
https://www.suse.com/security/cve/CVE-2006-1490	external
https://bugzilla.suse.com/161718	external
https://bugzilla.suse.com/164845	external
https://www.suse.com/security/cve/CVE-2006-1494	external
https://bugzilla.suse.com/164845	external
https://www.suse.com/security/cve/CVE-2006-1991	external
https://bugzilla.suse.com/169038	external
https://www.suse.com/security/cve/CVE-2007-4783	external
https://bugzilla.suse.com/308069	external
https://bugzilla.suse.com/325827	external
https://www.suse.com/security/cve/CVE-2007-4887	external
https://bugzilla.suse.com/325657	external
https://www.suse.com/security/cve/CVE-2008-0599	external
https://bugzilla.suse.com/387745	external
https://bugzilla.suse.com/393279	external
https://www.suse.com/security/cve/CVE-2017-9120	external
https://bugzilla.suse.com/1103661	external
https://www.suse.com/security/cve/CVE-2018-1000222	external
https://bugzilla.suse.com/1105434	external
https://www.suse.com/security/cve/CVE-2018-1000888	external
https://www.suse.com/security/cve/CVE-2018-12882	external
https://bugzilla.suse.com/1099098	external
https://www.suse.com/security/cve/CVE-2018-14851	external
https://bugzilla.suse.com/1103659	external
https://www.suse.com/security/cve/CVE-2018-17082	external
https://bugzilla.suse.com/1108753	external
https://www.suse.com/security/cve/CVE-2018-19935	external
https://bugzilla.suse.com/1118832	external
https://www.suse.com/security/cve/CVE-2018-20783	external
https://bugzilla.suse.com/1126713	external
https://bugzilla.suse.com/1127122	external
https://www.suse.com/security/cve/CVE-2019-11034	external
https://bugzilla.suse.com/1132838	external
https://www.suse.com/security/cve/CVE-2019-11035	external
https://bugzilla.suse.com/1132837	external
https://www.suse.com/security/cve/CVE-2019-11036	external
https://bugzilla.suse.com/1134322	external
https://www.suse.com/security/cve/CVE-2019-11039	external
https://bugzilla.suse.com/1138173	external
https://www.suse.com/security/cve/CVE-2019-11040	external
https://bugzilla.suse.com/1138172	external
https://www.suse.com/security/cve/CVE-2019-11041	external
https://bugzilla.suse.com/1146360	external
https://www.suse.com/security/cve/CVE-2019-11042	external
https://bugzilla.suse.com/1145095	external
https://www.suse.com/security/cve/CVE-2019-11043	external
https://bugzilla.suse.com/1154999	external
https://www.suse.com/security/cve/CVE-2019-11046	external
https://bugzilla.suse.com/1159924	external
https://www.suse.com/security/cve/CVE-2019-9020	external
https://bugzilla.suse.com/1126711	external
https://www.suse.com/security/cve/CVE-2019-9021	external
https://bugzilla.suse.com/1126713	external
https://www.suse.com/security/cve/CVE-2019-9022	external
https://bugzilla.suse.com/1126827	external
https://www.suse.com/security/cve/CVE-2019-9023	external
https://bugzilla.suse.com/1126823	external
https://www.suse.com/security/cve/CVE-2019-9024	external
https://bugzilla.suse.com/1126821	external
https://www.suse.com/security/cve/CVE-2019-9637	external
https://bugzilla.suse.com/1128892	external
https://www.suse.com/security/cve/CVE-2019-9638	external
https://bugzilla.suse.com/1128889	external
https://www.suse.com/security/cve/CVE-2019-9640	external
https://bugzilla.suse.com/1128883	external
https://www.suse.com/security/cve/CVE-2019-9641	external
https://bugzilla.suse.com/1128722	external
https://www.suse.com/security/cve/CVE-2019-9675	external
https://bugzilla.suse.com/1128886	external
https://www.suse.com/security/cve/CVE-2020-7062	external
https://bugzilla.suse.com/1165280	external
https://www.suse.com/security/cve/CVE-2020-7063	external
https://bugzilla.suse.com/1165289	external
https://www.suse.com/security/cve/CVE-2021-21706	external
https://bugzilla.suse.com/1191314	external

JSON

To clipboard

Loading 1.7 MB of JSON…

CVE-2005-3353 (GCVE-0-2005-3353)

Vulnerability from cvelistv5 – Published: 2005-11-18 23:00 – Updated: 2024-08-07 23:10

Summary

The exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service (infinite loop) via a malformed JPEG image.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

30 references

URL	Tags
http://www.securityfocus.com/bid/15358	vdb-entryx_refsource_BID
http://secunia.com/advisories/22691	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.turbolinux.com/security/2006/TLSA-2006…	vendor-advisoryx_refsource_TURBO
http://secunia.com/advisories/18198	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2006/dsa-1206	vendor-advisoryx_refsource_DEBIAN
http://itrc.hp.com/service/cki/docDisplay.do?docI…	vendor-advisoryx_refsource_HP
http://securityreason.com/securityalert/525	third-party-advisoryx_refsource_SREASON
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://secunia.com/advisories/19064	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18054	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/22713	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/16907	vdb-entryx_refsource_BID
http://www.fedoralegacy.org/updates/FC2/2005-11-2…	vendor-advisoryx_refsource_FEDORA
http://secunia.com/advisories/17371	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/0791	vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/4320	vdb-entryx_refsource_VUPEN
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://rhn.redhat.com/errata/RHSA-2005-831.html	vendor-advisoryx_refsource_REDHAT
http://www.php.net/ChangeLog-4.php#4.4.1	x_refsource_CONFIRM
http://secunia.com/advisories/17490	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/419504/100…	vendor-advisoryx_refsource_SUSE
http://www.us-cert.gov/cas/techalerts/TA06-062A.html	third-party-advisoryx_refsource_CERT
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/17531	third-party-advisoryx_refsource_SECUNIA
http://www.openpkg.org/security/OpenPKG-SA-2005.0…	vendor-advisoryx_refsource_OPENPKG
http://secunia.com/advisories/17557	third-party-advisoryx_refsource_SECUNIA
https://www.ubuntu.com/usn/usn-232-1/	vendor-advisoryx_refsource_UBUNTU
http://docs.info.apple.com/article.html?artnum=303382	x_refsource_CONFIRM
http://bugs.php.net/bug.php?id=34704	x_refsource_MISC

Date Public

2005-11-10 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:10:08.553Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "15358",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15358"
          },
          {
            "name": "22691",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22691"
          },
          {
            "name": "MDKSA-2005:213",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213"
          },
          {
            "name": "TLSA-2006-38",
            "tags": [
              "vendor-advisory",
              "x_refsource_TURBO",
              "x_transferred"
            ],
            "url": "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt"
          },
          {
            "name": "18198",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18198"
          },
          {
            "name": "DSA-1206",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1206"
          },
          {
            "name": "SSRT061238",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
          },
          {
            "name": "HPSBMA02159",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
          },
          {
            "name": "525",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/525"
          },
          {
            "name": "php-exif-dos(24351)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24351"
          },
          {
            "name": "19064",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19064"
          },
          {
            "name": "18054",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18054"
          },
          {
            "name": "22713",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22713"
          },
          {
            "name": "16907",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16907"
          },
          {
            "name": "FLSA:166943",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html"
          },
          {
            "name": "17371",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17371"
          },
          {
            "name": "ADV-2006-0791",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/0791"
          },
          {
            "name": "ADV-2006-4320",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4320"
          },
          {
            "name": "APPLE-SA-2006-03-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html"
          },
          {
            "name": "RHSA-2005:831",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2005-831.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-4.php#4.4.1"
          },
          {
            "name": "17490",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17490"
          },
          {
            "name": "SUSE-SA:2005:069",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/419504/100/0/threaded"
          },
          {
            "name": "TA06-062A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA06-062A.html"
          },
          {
            "name": "oval:org.mitre.oval:def:11032",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11032"
          },
          {
            "name": "17531",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17531"
          },
          {
            "name": "OpenPKG-SA-2005.027",
            "tags": [
              "vendor-advisory",
              "x_refsource_OPENPKG",
              "x_transferred"
            ],
            "url": "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html"
          },
          {
            "name": "17557",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17557"
          },
          {
            "name": "USN-232-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://www.ubuntu.com/usn/usn-232-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://docs.info.apple.com/article.html?artnum=303382"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugs.php.net/bug.php?id=34704"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-11-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to cause a denial of service (infinite loop) via a malformed JPEG image."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "15358",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15358"
        },
        {
          "name": "22691",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22691"
        },
        {
          "name": "MDKSA-2005:213",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213"
        },
        {
          "name": "TLSA-2006-38",
          "tags": [
            "vendor-advisory",
            "x_refsource_TURBO"
          ],
          "url": "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt"
        },
        {
          "name": "18198",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18198"
        },
        {
          "name": "DSA-1206",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1206"
        },
        {
          "name": "SSRT061238",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
        },
        {
          "name": "HPSBMA02159",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
        },
        {
          "name": "525",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/525"
        },
        {
          "name": "php-exif-dos(24351)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24351"
        },
        {
          "name": "19064",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19064"
        },
        {
          "name": "18054",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18054"
        },
        {
          "name": "22713",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22713"
        },
        {
          "name": "16907",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16907"
        },
        {
          "name": "FLSA:166943",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html"
        },
        {
          "name": "17371",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17371"
        },
        {
          "name": "ADV-2006-0791",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/0791"
        },
        {
          "name": "ADV-2006-4320",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4320"
        },
        {
          "name": "APPLE-SA-2006-03-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html"
        },
        {
          "name": "RHSA-2005:831",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2005-831.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-4.php#4.4.1"
        },
        {
          "name": "17490",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17490"
        },
        {
          "name": "SUSE-SA:2005:069",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.securityfocus.com/archive/1/419504/100/0/threaded"
        },
        {
          "name": "TA06-062A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA06-062A.html"
        },
        {
          "name": "oval:org.mitre.oval:def:11032",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11032"
        },
        {
          "name": "17531",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17531"
        },
        {
          "name": "OpenPKG-SA-2005.027",
          "tags": [
            "vendor-advisory",
            "x_refsource_OPENPKG"
          ],
          "url": "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html"
        },
        {
          "name": "17557",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17557"
        },
        {
          "name": "USN-232-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://www.ubuntu.com/usn/usn-232-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://docs.info.apple.com/article.html?artnum=303382"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugs.php.net/bug.php?id=34704"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2005-3353",
    "datePublished": "2005-11-18T23:00:00.000Z",
    "dateReserved": "2005-10-27T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:10:08.553Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-3388 (GCVE-0-2005-3388)

Vulnerability from cvelistv5 – Published: 2005-11-01 02:00 – Updated: 2024-08-07 23:10

Summary

Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

32 references

URL	Tags
http://www.securityfocus.com/archive/1/415292	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/21252	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/22691	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.redhat.com/support/errata/RHSA-2005-831.html	vendor-advisoryx_refsource_REDHAT
http://www.turbolinux.com/security/2006/TLSA-2006…	vendor-advisoryx_refsource_TURBO
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://secunia.com/advisories/18198	third-party-advisoryx_refsource_SECUNIA
http://itrc.hp.com/service/cki/docDisplay.do?docI…	vendor-advisoryx_refsource_HP
http://www.vupen.com/english/advisories/2005/2254	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/17559	third-party-advisoryx_refsource_SECUNIA
http://www.fedoralegacy.org/updates/FC2/2005-11-2…	vendor-advisoryx_refsource_FEDORA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.securityfocus.com/bid/15248	vdb-entryx_refsource_BID
http://secunia.com/advisories/17371	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/4320	vdb-entryx_refsource_VUPEN
http://rhn.redhat.com/errata/RHSA-2006-0549.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/17490	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/release_4_4_1.php	x_refsource_CONFIRM
http://securityreason.com/securityalert/133	third-party-advisoryx_refsource_SREASON
http://secunia.com/advisories/17510	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17531	third-party-advisoryx_refsource_SECUNIA
http://www.openpkg.org/security/OpenPKG-SA-2005.0…	vendor-advisoryx_refsource_OPENPKG
http://secunia.com/advisories/18669	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17557	third-party-advisoryx_refsource_SECUNIA
http://www.gentoo.org/security/en/glsa/glsa-20051…	vendor-advisoryx_refsource_GENTOO
https://www.ubuntu.com/usn/usn-232-1/	vendor-advisoryx_refsource_UBUNTU
http://www.redhat.com/support/errata/RHSA-2005-838.html	vendor-advisoryx_refsource_REDHAT
http://securitytracker.com/id?1015130	vdb-entryx_refsource_SECTRACK
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.hardened-php.net/advisory_182005.77.html	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Date Public

2005-10-31 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:10:08.338Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20051031 Advisory 18/2005: PHP Cross Site Scripting (XSS) Vulnerability in phpinfo()",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/415292"
          },
          {
            "name": "21252",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21252"
          },
          {
            "name": "22691",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22691"
          },
          {
            "name": "MDKSA-2005:213",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213"
          },
          {
            "name": "RHSA-2005:831",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-831.html"
          },
          {
            "name": "TLSA-2006-38",
            "tags": [
              "vendor-advisory",
              "x_refsource_TURBO",
              "x_transferred"
            ],
            "url": "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm"
          },
          {
            "name": "18198",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18198"
          },
          {
            "name": "SSRT061238",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
          },
          {
            "name": "HPSBMA02159",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
          },
          {
            "name": "ADV-2005-2254",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2254"
          },
          {
            "name": "17559",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17559"
          },
          {
            "name": "FLSA:166943",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10542",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10542"
          },
          {
            "name": "15248",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15248"
          },
          {
            "name": "17371",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17371"
          },
          {
            "name": "ADV-2006-4320",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4320"
          },
          {
            "name": "RHSA-2006:0549",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html"
          },
          {
            "name": "17490",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17490"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/release_4_4_1.php"
          },
          {
            "name": "133",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/133"
          },
          {
            "name": "17510",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17510"
          },
          {
            "name": "17531",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17531"
          },
          {
            "name": "OpenPKG-SA-2005.027",
            "tags": [
              "vendor-advisory",
              "x_refsource_OPENPKG",
              "x_transferred"
            ],
            "url": "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html"
          },
          {
            "name": "18669",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18669"
          },
          {
            "name": "17557",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17557"
          },
          {
            "name": "GLSA-200511-08",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml"
          },
          {
            "name": "USN-232-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://www.ubuntu.com/usn/usn-232-1/"
          },
          {
            "name": "RHSA-2005:838",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-838.html"
          },
          {
            "name": "1015130",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015130"
          },
          {
            "name": "SUSE-SR:2005:027",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.hardened-php.net/advisory_182005.77.html"
          },
          {
            "name": "FEDORA-2020-fb144e7de5",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PIRZJHM6UDNWNHZ3PCMEZ2YUK3CWY2UE/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-10-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a \"stacked array assignment.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-06-23T02:06:34.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20051031 Advisory 18/2005: PHP Cross Site Scripting (XSS) Vulnerability in phpinfo()",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/415292"
        },
        {
          "name": "21252",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21252"
        },
        {
          "name": "22691",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22691"
        },
        {
          "name": "MDKSA-2005:213",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213"
        },
        {
          "name": "RHSA-2005:831",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-831.html"
        },
        {
          "name": "TLSA-2006-38",
          "tags": [
            "vendor-advisory",
            "x_refsource_TURBO"
          ],
          "url": "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm"
        },
        {
          "name": "18198",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18198"
        },
        {
          "name": "SSRT061238",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
        },
        {
          "name": "HPSBMA02159",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
        },
        {
          "name": "ADV-2005-2254",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2254"
        },
        {
          "name": "17559",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17559"
        },
        {
          "name": "FLSA:166943",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10542",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10542"
        },
        {
          "name": "15248",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15248"
        },
        {
          "name": "17371",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17371"
        },
        {
          "name": "ADV-2006-4320",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4320"
        },
        {
          "name": "RHSA-2006:0549",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html"
        },
        {
          "name": "17490",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17490"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/release_4_4_1.php"
        },
        {
          "name": "133",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/133"
        },
        {
          "name": "17510",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17510"
        },
        {
          "name": "17531",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17531"
        },
        {
          "name": "OpenPKG-SA-2005.027",
          "tags": [
            "vendor-advisory",
            "x_refsource_OPENPKG"
          ],
          "url": "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html"
        },
        {
          "name": "18669",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18669"
        },
        {
          "name": "17557",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17557"
        },
        {
          "name": "GLSA-200511-08",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml"
        },
        {
          "name": "USN-232-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://www.ubuntu.com/usn/usn-232-1/"
        },
        {
          "name": "RHSA-2005:838",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-838.html"
        },
        {
          "name": "1015130",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015130"
        },
        {
          "name": "SUSE-SR:2005:027",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.hardened-php.net/advisory_182005.77.html"
        },
        {
          "name": "FEDORA-2020-fb144e7de5",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PIRZJHM6UDNWNHZ3PCMEZ2YUK3CWY2UE/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3388",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a \"stacked array assignment.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20051031 Advisory 18/2005: PHP Cross Site Scripting (XSS) Vulnerability in phpinfo()",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/415292"
            },
            {
              "name": "21252",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21252"
            },
            {
              "name": "22691",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22691"
            },
            {
              "name": "MDKSA-2005:213",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213"
            },
            {
              "name": "RHSA-2005:831",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2005-831.html"
            },
            {
              "name": "TLSA-2006-38",
              "refsource": "TURBO",
              "url": "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm"
            },
            {
              "name": "18198",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18198"
            },
            {
              "name": "SSRT061238",
              "refsource": "HP",
              "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
            },
            {
              "name": "HPSBMA02159",
              "refsource": "HP",
              "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
            },
            {
              "name": "ADV-2005-2254",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/2254"
            },
            {
              "name": "17559",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17559"
            },
            {
              "name": "FLSA:166943",
              "refsource": "FEDORA",
              "url": "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html"
            },
            {
              "name": "oval:org.mitre.oval:def:10542",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10542"
            },
            {
              "name": "15248",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15248"
            },
            {
              "name": "17371",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17371"
            },
            {
              "name": "ADV-2006-4320",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/4320"
            },
            {
              "name": "RHSA-2006:0549",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html"
            },
            {
              "name": "17490",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17490"
            },
            {
              "name": "http://www.php.net/release_4_4_1.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/release_4_4_1.php"
            },
            {
              "name": "133",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/133"
            },
            {
              "name": "17510",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17510"
            },
            {
              "name": "17531",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17531"
            },
            {
              "name": "OpenPKG-SA-2005.027",
              "refsource": "OPENPKG",
              "url": "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html"
            },
            {
              "name": "18669",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18669"
            },
            {
              "name": "17557",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17557"
            },
            {
              "name": "GLSA-200511-08",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml"
            },
            {
              "name": "USN-232-1",
              "refsource": "UBUNTU",
              "url": "https://www.ubuntu.com/usn/usn-232-1/"
            },
            {
              "name": "RHSA-2005:838",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2005-838.html"
            },
            {
              "name": "1015130",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015130"
            },
            {
              "name": "SUSE-SR:2005:027",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
            },
            {
              "name": "http://www.hardened-php.net/advisory_182005.77.html",
              "refsource": "MISC",
              "url": "http://www.hardened-php.net/advisory_182005.77.html"
            },
            {
              "name": "FEDORA-2020-fb144e7de5",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PIRZJHM6UDNWNHZ3PCMEZ2YUK3CWY2UE/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3388",
    "datePublished": "2005-11-01T02:00:00.000Z",
    "dateReserved": "2005-11-01T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:10:08.338Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-3389 (GCVE-0-2005-3389)

Vulnerability from cvelistv5 – Published: 2005-11-01 02:00 – Updated: 2024-08-07 23:10

Summary

The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an internal flag that enables register_globals and allows attackers to exploit vulnerabilities in PHP applications that would otherwise be protected.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

33 references

URL	Tags
http://www.securityfocus.com/bid/15249	vdb-entryx_refsource_BID
http://secunia.com/advisories/21252	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/22691	third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/134	third-party-advisoryx_refsource_SREASON
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.redhat.com/support/errata/RHSA-2005-831.html	vendor-advisoryx_refsource_REDHAT
http://www.turbolinux.com/security/2006/TLSA-2006…	vendor-advisoryx_refsource_TURBO
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://secunia.com/advisories/18198	third-party-advisoryx_refsource_SECUNIA
http://itrc.hp.com/service/cki/docDisplay.do?docI…	vendor-advisoryx_refsource_HP
http://secunia.com/advisories/18054	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2005/2254	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/archive/1/415291	mailing-listx_refsource_BUGTRAQ
http://securitytracker.com/id?1015131	vdb-entryx_refsource_SECTRACK
http://www.hardened-php.net/advisory_192005.78.html	x_refsource_MISC
http://secunia.com/advisories/17559	third-party-advisoryx_refsource_SECUNIA
http://www.fedoralegacy.org/updates/FC2/2005-11-2…	vendor-advisoryx_refsource_FEDORA
http://secunia.com/advisories/17371	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/4320	vdb-entryx_refsource_VUPEN
http://rhn.redhat.com/errata/RHSA-2006-0549.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/17490	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/419504/100…	vendor-advisoryx_refsource_SUSE
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.php.net/release_4_4_1.php	x_refsource_CONFIRM
http://secunia.com/advisories/17510	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17531	third-party-advisoryx_refsource_SECUNIA
http://www.openpkg.org/security/OpenPKG-SA-2005.0…	vendor-advisoryx_refsource_OPENPKG
http://secunia.com/advisories/18669	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17557	third-party-advisoryx_refsource_SECUNIA
http://www.gentoo.org/security/en/glsa/glsa-20051…	vendor-advisoryx_refsource_GENTOO
https://www.ubuntu.com/usn/usn-232-1/	vendor-advisoryx_refsource_UBUNTU
http://www.redhat.com/support/errata/RHSA-2005-838.html	vendor-advisoryx_refsource_REDHAT
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE

Date Public

2005-10-31 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:10:08.579Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "15249",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15249"
          },
          {
            "name": "21252",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21252"
          },
          {
            "name": "22691",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22691"
          },
          {
            "name": "134",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/134"
          },
          {
            "name": "MDKSA-2005:213",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213"
          },
          {
            "name": "RHSA-2005:831",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-831.html"
          },
          {
            "name": "TLSA-2006-38",
            "tags": [
              "vendor-advisory",
              "x_refsource_TURBO",
              "x_transferred"
            ],
            "url": "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm"
          },
          {
            "name": "18198",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18198"
          },
          {
            "name": "SSRT061238",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
          },
          {
            "name": "HPSBMA02159",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
          },
          {
            "name": "18054",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18054"
          },
          {
            "name": "ADV-2005-2254",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2254"
          },
          {
            "name": "20051031 Advisory 19/2005: PHP register_globals Activation Vulnerability in parse_str()",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/415291"
          },
          {
            "name": "1015131",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015131"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.hardened-php.net/advisory_192005.78.html"
          },
          {
            "name": "17559",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17559"
          },
          {
            "name": "FLSA:166943",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html"
          },
          {
            "name": "17371",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17371"
          },
          {
            "name": "ADV-2006-4320",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4320"
          },
          {
            "name": "RHSA-2006:0549",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html"
          },
          {
            "name": "17490",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17490"
          },
          {
            "name": "SUSE-SA:2005:069",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/419504/100/0/threaded"
          },
          {
            "name": "oval:org.mitre.oval:def:11481",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11481"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/release_4_4_1.php"
          },
          {
            "name": "17510",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17510"
          },
          {
            "name": "17531",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17531"
          },
          {
            "name": "OpenPKG-SA-2005.027",
            "tags": [
              "vendor-advisory",
              "x_refsource_OPENPKG",
              "x_transferred"
            ],
            "url": "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html"
          },
          {
            "name": "18669",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18669"
          },
          {
            "name": "17557",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17557"
          },
          {
            "name": "GLSA-200511-08",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml"
          },
          {
            "name": "USN-232-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://www.ubuntu.com/usn/usn-232-1/"
          },
          {
            "name": "RHSA-2005:838",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-838.html"
          },
          {
            "name": "SUSE-SR:2005:027",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-10-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an internal flag that enables register_globals and allows attackers to exploit vulnerabilities in PHP applications that would otherwise be protected."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "15249",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15249"
        },
        {
          "name": "21252",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21252"
        },
        {
          "name": "22691",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22691"
        },
        {
          "name": "134",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/134"
        },
        {
          "name": "MDKSA-2005:213",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213"
        },
        {
          "name": "RHSA-2005:831",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-831.html"
        },
        {
          "name": "TLSA-2006-38",
          "tags": [
            "vendor-advisory",
            "x_refsource_TURBO"
          ],
          "url": "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm"
        },
        {
          "name": "18198",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18198"
        },
        {
          "name": "SSRT061238",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
        },
        {
          "name": "HPSBMA02159",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
        },
        {
          "name": "18054",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18054"
        },
        {
          "name": "ADV-2005-2254",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2254"
        },
        {
          "name": "20051031 Advisory 19/2005: PHP register_globals Activation Vulnerability in parse_str()",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/415291"
        },
        {
          "name": "1015131",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015131"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.hardened-php.net/advisory_192005.78.html"
        },
        {
          "name": "17559",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17559"
        },
        {
          "name": "FLSA:166943",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html"
        },
        {
          "name": "17371",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17371"
        },
        {
          "name": "ADV-2006-4320",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4320"
        },
        {
          "name": "RHSA-2006:0549",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html"
        },
        {
          "name": "17490",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17490"
        },
        {
          "name": "SUSE-SA:2005:069",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.securityfocus.com/archive/1/419504/100/0/threaded"
        },
        {
          "name": "oval:org.mitre.oval:def:11481",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11481"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/release_4_4_1.php"
        },
        {
          "name": "17510",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17510"
        },
        {
          "name": "17531",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17531"
        },
        {
          "name": "OpenPKG-SA-2005.027",
          "tags": [
            "vendor-advisory",
            "x_refsource_OPENPKG"
          ],
          "url": "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html"
        },
        {
          "name": "18669",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18669"
        },
        {
          "name": "17557",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17557"
        },
        {
          "name": "GLSA-200511-08",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml"
        },
        {
          "name": "USN-232-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://www.ubuntu.com/usn/usn-232-1/"
        },
        {
          "name": "RHSA-2005:838",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-838.html"
        },
        {
          "name": "SUSE-SR:2005:027",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3389",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an internal flag that enables register_globals and allows attackers to exploit vulnerabilities in PHP applications that would otherwise be protected."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "15249",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15249"
            },
            {
              "name": "21252",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21252"
            },
            {
              "name": "22691",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22691"
            },
            {
              "name": "134",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/134"
            },
            {
              "name": "MDKSA-2005:213",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213"
            },
            {
              "name": "RHSA-2005:831",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2005-831.html"
            },
            {
              "name": "TLSA-2006-38",
              "refsource": "TURBO",
              "url": "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm"
            },
            {
              "name": "18198",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18198"
            },
            {
              "name": "SSRT061238",
              "refsource": "HP",
              "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
            },
            {
              "name": "HPSBMA02159",
              "refsource": "HP",
              "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
            },
            {
              "name": "18054",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18054"
            },
            {
              "name": "ADV-2005-2254",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/2254"
            },
            {
              "name": "20051031 Advisory 19/2005: PHP register_globals Activation Vulnerability in parse_str()",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/415291"
            },
            {
              "name": "1015131",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015131"
            },
            {
              "name": "http://www.hardened-php.net/advisory_192005.78.html",
              "refsource": "MISC",
              "url": "http://www.hardened-php.net/advisory_192005.78.html"
            },
            {
              "name": "17559",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17559"
            },
            {
              "name": "FLSA:166943",
              "refsource": "FEDORA",
              "url": "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html"
            },
            {
              "name": "17371",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17371"
            },
            {
              "name": "ADV-2006-4320",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/4320"
            },
            {
              "name": "RHSA-2006:0549",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html"
            },
            {
              "name": "17490",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17490"
            },
            {
              "name": "SUSE-SA:2005:069",
              "refsource": "SUSE",
              "url": "http://www.securityfocus.com/archive/1/419504/100/0/threaded"
            },
            {
              "name": "oval:org.mitre.oval:def:11481",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11481"
            },
            {
              "name": "http://www.php.net/release_4_4_1.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/release_4_4_1.php"
            },
            {
              "name": "17510",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17510"
            },
            {
              "name": "17531",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17531"
            },
            {
              "name": "OpenPKG-SA-2005.027",
              "refsource": "OPENPKG",
              "url": "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html"
            },
            {
              "name": "18669",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18669"
            },
            {
              "name": "17557",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17557"
            },
            {
              "name": "GLSA-200511-08",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml"
            },
            {
              "name": "USN-232-1",
              "refsource": "UBUNTU",
              "url": "https://www.ubuntu.com/usn/usn-232-1/"
            },
            {
              "name": "RHSA-2005:838",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2005-838.html"
            },
            {
              "name": "SUSE-SR:2005:027",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3389",
    "datePublished": "2005-11-01T02:00:00.000Z",
    "dateReserved": "2005-11-01T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:10:08.579Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-3390 (GCVE-0-2005-3390)

Vulnerability from cvelistv5 – Published: 2005-11-01 02:00 – Updated: 2024-08-07 23:10

Summary

The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS" fileupload field.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

33 references

URL	Tags
http://secunia.com/advisories/21252	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/22691	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.redhat.com/support/errata/RHSA-2005-831.html	vendor-advisoryx_refsource_REDHAT
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://secunia.com/advisories/18198	third-party-advisoryx_refsource_SECUNIA
http://itrc.hp.com/service/cki/docDisplay.do?docI…	vendor-advisoryx_refsource_HP
http://securityreason.com/securityalert/132	third-party-advisoryx_refsource_SREASON
http://secunia.com/advisories/18054	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2005/2254	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/archive/1/415290/30/…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/17559	third-party-advisoryx_refsource_SECUNIA
http://www.fedoralegacy.org/updates/FC2/2005-11-2…	vendor-advisoryx_refsource_FEDORA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.securityfocus.com/bid/15250	vdb-entryx_refsource_BID
http://secunia.com/advisories/17371	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/4320	vdb-entryx_refsource_VUPEN
http://rhn.redhat.com/errata/RHSA-2006-0549.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/17490	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/419504/100…	vendor-advisoryx_refsource_SUSE
http://www.php.net/release_4_4_1.php	x_refsource_CONFIRM
http://www.hardened-php.net/advisory_202005.79.html	x_refsource_MISC
http://securitytracker.com/id?1015129	vdb-entryx_refsource_SECTRACK
http://www.hardened-php.net/globals-problem	x_refsource_MISC
http://secunia.com/advisories/17510	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17531	third-party-advisoryx_refsource_SECUNIA
http://www.openpkg.org/security/OpenPKG-SA-2005.0…	vendor-advisoryx_refsource_OPENPKG
http://secunia.com/advisories/18669	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17557	third-party-advisoryx_refsource_SECUNIA
http://www.gentoo.org/security/en/glsa/glsa-20051…	vendor-advisoryx_refsource_GENTOO
https://www.ubuntu.com/usn/usn-232-1/	vendor-advisoryx_refsource_UBUNTU
http://www.redhat.com/support/errata/RHSA-2005-838.html	vendor-advisoryx_refsource_REDHAT
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE

Date Public

2005-10-31 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:10:08.488Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "21252",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21252"
          },
          {
            "name": "22691",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22691"
          },
          {
            "name": "MDKSA-2005:213",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213"
          },
          {
            "name": "RHSA-2005:831",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-831.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm"
          },
          {
            "name": "18198",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18198"
          },
          {
            "name": "SSRT061238",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
          },
          {
            "name": "HPSBMA02159",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
          },
          {
            "name": "132",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/132"
          },
          {
            "name": "18054",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18054"
          },
          {
            "name": "ADV-2005-2254",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2254"
          },
          {
            "name": "20051031 Advisory 20/2005: PHP File-Upload $GLOBALS Overwrite Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/415290/30/0/threaded"
          },
          {
            "name": "17559",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17559"
          },
          {
            "name": "FLSA:166943",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html"
          },
          {
            "name": "oval:org.mitre.oval:def:10537",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10537"
          },
          {
            "name": "15250",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15250"
          },
          {
            "name": "17371",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17371"
          },
          {
            "name": "ADV-2006-4320",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4320"
          },
          {
            "name": "RHSA-2006:0549",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html"
          },
          {
            "name": "17490",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17490"
          },
          {
            "name": "SUSE-SA:2005:069",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/419504/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/release_4_4_1.php"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.hardened-php.net/advisory_202005.79.html"
          },
          {
            "name": "1015129",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015129"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.hardened-php.net/globals-problem"
          },
          {
            "name": "17510",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17510"
          },
          {
            "name": "17531",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17531"
          },
          {
            "name": "OpenPKG-SA-2005.027",
            "tags": [
              "vendor-advisory",
              "x_refsource_OPENPKG",
              "x_transferred"
            ],
            "url": "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html"
          },
          {
            "name": "18669",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18669"
          },
          {
            "name": "17557",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17557"
          },
          {
            "name": "GLSA-200511-08",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml"
          },
          {
            "name": "USN-232-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://www.ubuntu.com/usn/usn-232-1/"
          },
          {
            "name": "RHSA-2005:838",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-838.html"
          },
          {
            "name": "SUSE-SR:2005:027",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-10-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a \"GLOBALS\" fileupload field."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "21252",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21252"
        },
        {
          "name": "22691",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22691"
        },
        {
          "name": "MDKSA-2005:213",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213"
        },
        {
          "name": "RHSA-2005:831",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-831.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm"
        },
        {
          "name": "18198",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18198"
        },
        {
          "name": "SSRT061238",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
        },
        {
          "name": "HPSBMA02159",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
        },
        {
          "name": "132",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/132"
        },
        {
          "name": "18054",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18054"
        },
        {
          "name": "ADV-2005-2254",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2254"
        },
        {
          "name": "20051031 Advisory 20/2005: PHP File-Upload $GLOBALS Overwrite Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/415290/30/0/threaded"
        },
        {
          "name": "17559",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17559"
        },
        {
          "name": "FLSA:166943",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html"
        },
        {
          "name": "oval:org.mitre.oval:def:10537",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10537"
        },
        {
          "name": "15250",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15250"
        },
        {
          "name": "17371",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17371"
        },
        {
          "name": "ADV-2006-4320",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4320"
        },
        {
          "name": "RHSA-2006:0549",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html"
        },
        {
          "name": "17490",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17490"
        },
        {
          "name": "SUSE-SA:2005:069",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.securityfocus.com/archive/1/419504/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/release_4_4_1.php"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.hardened-php.net/advisory_202005.79.html"
        },
        {
          "name": "1015129",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015129"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.hardened-php.net/globals-problem"
        },
        {
          "name": "17510",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17510"
        },
        {
          "name": "17531",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17531"
        },
        {
          "name": "OpenPKG-SA-2005.027",
          "tags": [
            "vendor-advisory",
            "x_refsource_OPENPKG"
          ],
          "url": "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html"
        },
        {
          "name": "18669",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18669"
        },
        {
          "name": "17557",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17557"
        },
        {
          "name": "GLSA-200511-08",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml"
        },
        {
          "name": "USN-232-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://www.ubuntu.com/usn/usn-232-1/"
        },
        {
          "name": "RHSA-2005:838",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-838.html"
        },
        {
          "name": "SUSE-SR:2005:027",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3390",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a \"GLOBALS\" fileupload field."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "21252",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21252"
            },
            {
              "name": "22691",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22691"
            },
            {
              "name": "MDKSA-2005:213",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213"
            },
            {
              "name": "RHSA-2005:831",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2005-831.html"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm"
            },
            {
              "name": "18198",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18198"
            },
            {
              "name": "SSRT061238",
              "refsource": "HP",
              "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
            },
            {
              "name": "HPSBMA02159",
              "refsource": "HP",
              "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
            },
            {
              "name": "132",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/132"
            },
            {
              "name": "18054",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18054"
            },
            {
              "name": "ADV-2005-2254",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/2254"
            },
            {
              "name": "20051031 Advisory 20/2005: PHP File-Upload $GLOBALS Overwrite Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/415290/30/0/threaded"
            },
            {
              "name": "17559",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17559"
            },
            {
              "name": "FLSA:166943",
              "refsource": "FEDORA",
              "url": "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html"
            },
            {
              "name": "oval:org.mitre.oval:def:10537",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10537"
            },
            {
              "name": "15250",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15250"
            },
            {
              "name": "17371",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17371"
            },
            {
              "name": "ADV-2006-4320",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/4320"
            },
            {
              "name": "RHSA-2006:0549",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html"
            },
            {
              "name": "17490",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17490"
            },
            {
              "name": "SUSE-SA:2005:069",
              "refsource": "SUSE",
              "url": "http://www.securityfocus.com/archive/1/419504/100/0/threaded"
            },
            {
              "name": "http://www.php.net/release_4_4_1.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/release_4_4_1.php"
            },
            {
              "name": "http://www.hardened-php.net/advisory_202005.79.html",
              "refsource": "MISC",
              "url": "http://www.hardened-php.net/advisory_202005.79.html"
            },
            {
              "name": "1015129",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015129"
            },
            {
              "name": "http://www.hardened-php.net/globals-problem",
              "refsource": "MISC",
              "url": "http://www.hardened-php.net/globals-problem"
            },
            {
              "name": "17510",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17510"
            },
            {
              "name": "17531",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17531"
            },
            {
              "name": "OpenPKG-SA-2005.027",
              "refsource": "OPENPKG",
              "url": "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html"
            },
            {
              "name": "18669",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18669"
            },
            {
              "name": "17557",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17557"
            },
            {
              "name": "GLSA-200511-08",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml"
            },
            {
              "name": "USN-232-1",
              "refsource": "UBUNTU",
              "url": "https://www.ubuntu.com/usn/usn-232-1/"
            },
            {
              "name": "RHSA-2005:838",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2005-838.html"
            },
            {
              "name": "SUSE-SR:2005:027",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3390",
    "datePublished": "2005-11-01T02:00:00.000Z",
    "dateReserved": "2005-11-01T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:10:08.488Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-3391 (GCVE-0-2005-3391)

Vulnerability from cvelistv5 – Published: 2005-11-01 11:00 – Updated: 2024-08-07 23:10

Summary

Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and open_basedir restrictions via unknown attack vectors in (1) ext/curl and (2) ext/gd.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

24 references

URL	Tags
http://secunia.com/advisories/22691	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18198	third-party-advisoryx_refsource_SECUNIA
http://itrc.hp.com/service/cki/docDisplay.do?docI…	vendor-advisoryx_refsource_HP
http://www.osvdb.org/20898	vdb-entryx_refsource_OSVDB
http://securityreason.com/securityalert/525	third-party-advisoryx_refsource_SREASON
http://secunia.com/advisories/19064	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18054	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2005/2254	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/16907	vdb-entryx_refsource_BID
http://secunia.com/advisories/17371	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/0791	vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/4320	vdb-entryx_refsource_VUPEN
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.securityfocus.com/archive/1/419504/100…	vendor-advisoryx_refsource_SUSE
http://wwwnew.mandriva.com/security/advisories?na…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/18763	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/release_4_4_1.php	x_refsource_CONFIRM
http://www.us-cert.gov/cas/techalerts/TA06-062A.html	third-party-advisoryx_refsource_CERT
http://www.securityfocus.com/bid/15411	vdb-entryx_refsource_BID
http://secunia.com/advisories/17510	third-party-advisoryx_refsource_SECUNIA
http://www.openpkg.org/security/OpenPKG-SA-2005.0…	vendor-advisoryx_refsource_OPENPKG
http://www.gentoo.org/security/en/glsa/glsa-20051…	vendor-advisoryx_refsource_GENTOO
https://www.ubuntu.com/usn/usn-232-1/	vendor-advisoryx_refsource_UBUNTU
http://docs.info.apple.com/article.html?artnum=303382	x_refsource_CONFIRM

Date Public

2005-10-31 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:10:08.576Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "22691",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22691"
          },
          {
            "name": "18198",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18198"
          },
          {
            "name": "SSRT061238",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
          },
          {
            "name": "HPSBMA02159",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
          },
          {
            "name": "20898",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/20898"
          },
          {
            "name": "525",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/525"
          },
          {
            "name": "19064",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19064"
          },
          {
            "name": "18054",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18054"
          },
          {
            "name": "ADV-2005-2254",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2254"
          },
          {
            "name": "16907",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16907"
          },
          {
            "name": "17371",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17371"
          },
          {
            "name": "ADV-2006-0791",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/0791"
          },
          {
            "name": "ADV-2006-4320",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4320"
          },
          {
            "name": "APPLE-SA-2006-03-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html"
          },
          {
            "name": "SUSE-SA:2005:069",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/419504/100/0/threaded"
          },
          {
            "name": "MDKSA-2006:035",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:035"
          },
          {
            "name": "18763",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18763"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/release_4_4_1.php"
          },
          {
            "name": "TA06-062A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA06-062A.html"
          },
          {
            "name": "15411",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15411"
          },
          {
            "name": "17510",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17510"
          },
          {
            "name": "OpenPKG-SA-2005.027",
            "tags": [
              "vendor-advisory",
              "x_refsource_OPENPKG",
              "x_transferred"
            ],
            "url": "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html"
          },
          {
            "name": "GLSA-200511-08",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml"
          },
          {
            "name": "USN-232-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://www.ubuntu.com/usn/usn-232-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://docs.info.apple.com/article.html?artnum=303382"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-10-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and open_basedir restrictions via unknown attack vectors in (1) ext/curl and (2) ext/gd."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "22691",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22691"
        },
        {
          "name": "18198",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18198"
        },
        {
          "name": "SSRT061238",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
        },
        {
          "name": "HPSBMA02159",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
        },
        {
          "name": "20898",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/20898"
        },
        {
          "name": "525",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/525"
        },
        {
          "name": "19064",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19064"
        },
        {
          "name": "18054",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18054"
        },
        {
          "name": "ADV-2005-2254",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2254"
        },
        {
          "name": "16907",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16907"
        },
        {
          "name": "17371",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17371"
        },
        {
          "name": "ADV-2006-0791",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/0791"
        },
        {
          "name": "ADV-2006-4320",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4320"
        },
        {
          "name": "APPLE-SA-2006-03-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html"
        },
        {
          "name": "SUSE-SA:2005:069",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.securityfocus.com/archive/1/419504/100/0/threaded"
        },
        {
          "name": "MDKSA-2006:035",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:035"
        },
        {
          "name": "18763",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18763"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/release_4_4_1.php"
        },
        {
          "name": "TA06-062A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA06-062A.html"
        },
        {
          "name": "15411",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15411"
        },
        {
          "name": "17510",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17510"
        },
        {
          "name": "OpenPKG-SA-2005.027",
          "tags": [
            "vendor-advisory",
            "x_refsource_OPENPKG"
          ],
          "url": "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html"
        },
        {
          "name": "GLSA-200511-08",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml"
        },
        {
          "name": "USN-232-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://www.ubuntu.com/usn/usn-232-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://docs.info.apple.com/article.html?artnum=303382"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3391",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and open_basedir restrictions via unknown attack vectors in (1) ext/curl and (2) ext/gd."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "22691",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22691"
            },
            {
              "name": "18198",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18198"
            },
            {
              "name": "SSRT061238",
              "refsource": "HP",
              "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
            },
            {
              "name": "HPSBMA02159",
              "refsource": "HP",
              "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
            },
            {
              "name": "20898",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/20898"
            },
            {
              "name": "525",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/525"
            },
            {
              "name": "19064",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19064"
            },
            {
              "name": "18054",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18054"
            },
            {
              "name": "ADV-2005-2254",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/2254"
            },
            {
              "name": "16907",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16907"
            },
            {
              "name": "17371",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17371"
            },
            {
              "name": "ADV-2006-0791",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/0791"
            },
            {
              "name": "ADV-2006-4320",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/4320"
            },
            {
              "name": "APPLE-SA-2006-03-01",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html"
            },
            {
              "name": "SUSE-SA:2005:069",
              "refsource": "SUSE",
              "url": "http://www.securityfocus.com/archive/1/419504/100/0/threaded"
            },
            {
              "name": "MDKSA-2006:035",
              "refsource": "MANDRIVA",
              "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:035"
            },
            {
              "name": "18763",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18763"
            },
            {
              "name": "http://www.php.net/release_4_4_1.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/release_4_4_1.php"
            },
            {
              "name": "TA06-062A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA06-062A.html"
            },
            {
              "name": "15411",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15411"
            },
            {
              "name": "17510",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17510"
            },
            {
              "name": "OpenPKG-SA-2005.027",
              "refsource": "OPENPKG",
              "url": "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html"
            },
            {
              "name": "GLSA-200511-08",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml"
            },
            {
              "name": "USN-232-1",
              "refsource": "UBUNTU",
              "url": "https://www.ubuntu.com/usn/usn-232-1/"
            },
            {
              "name": "http://docs.info.apple.com/article.html?artnum=303382",
              "refsource": "CONFIRM",
              "url": "http://docs.info.apple.com/article.html?artnum=303382"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3391",
    "datePublished": "2005-11-01T11:00:00.000Z",
    "dateReserved": "2005-11-01T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:10:08.576Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-3392 (GCVE-0-2005-3392)

Vulnerability from cvelistv5 – Published: 2005-11-01 11:00 – Updated: 2024-08-07 23:10

Summary

Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safe_mode and open_basedir directives.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

22 references

URL	Tags
http://secunia.com/advisories/22691	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18198	third-party-advisoryx_refsource_SECUNIA
http://itrc.hp.com/service/cki/docDisplay.do?docI…	vendor-advisoryx_refsource_HP
http://securityreason.com/securityalert/525	third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/bid/15413	vdb-entryx_refsource_BID
http://secunia.com/advisories/19064	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/18054	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2005/2254	vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/16907	vdb-entryx_refsource_BID
http://secunia.com/advisories/17371	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/0791	vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/4320	vdb-entryx_refsource_VUPEN
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.securityfocus.com/archive/1/419504/100…	vendor-advisoryx_refsource_SUSE
http://www.osvdb.org/20897	vdb-entryx_refsource_OSVDB
http://www.php.net/release_4_4_1.php	x_refsource_CONFIRM
http://www.us-cert.gov/cas/techalerts/TA06-062A.html	third-party-advisoryx_refsource_CERT
http://secunia.com/advisories/17510	third-party-advisoryx_refsource_SECUNIA
http://www.gentoo.org/security/en/glsa/glsa-20051…	vendor-advisoryx_refsource_GENTOO
https://www.ubuntu.com/usn/usn-232-1/	vendor-advisoryx_refsource_UBUNTU
http://docs.info.apple.com/article.html?artnum=303382	x_refsource_CONFIRM

Date Public

2005-10-31 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:10:08.594Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "22691",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22691"
          },
          {
            "name": "18198",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18198"
          },
          {
            "name": "SSRT061238",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
          },
          {
            "name": "HPSBMA02159",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
          },
          {
            "name": "525",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/525"
          },
          {
            "name": "15413",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15413"
          },
          {
            "name": "19064",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19064"
          },
          {
            "name": "18054",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18054"
          },
          {
            "name": "ADV-2005-2254",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2254"
          },
          {
            "name": "php-virtual-bypass-security(22924)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22924"
          },
          {
            "name": "16907",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16907"
          },
          {
            "name": "17371",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17371"
          },
          {
            "name": "ADV-2006-0791",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/0791"
          },
          {
            "name": "ADV-2006-4320",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4320"
          },
          {
            "name": "APPLE-SA-2006-03-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html"
          },
          {
            "name": "SUSE-SA:2005:069",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/419504/100/0/threaded"
          },
          {
            "name": "20897",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/20897"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/release_4_4_1.php"
          },
          {
            "name": "TA06-062A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA06-062A.html"
          },
          {
            "name": "17510",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17510"
          },
          {
            "name": "GLSA-200511-08",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml"
          },
          {
            "name": "USN-232-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://www.ubuntu.com/usn/usn-232-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://docs.info.apple.com/article.html?artnum=303382"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-10-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safe_mode and open_basedir directives."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "22691",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22691"
        },
        {
          "name": "18198",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18198"
        },
        {
          "name": "SSRT061238",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
        },
        {
          "name": "HPSBMA02159",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
        },
        {
          "name": "525",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/525"
        },
        {
          "name": "15413",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15413"
        },
        {
          "name": "19064",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19064"
        },
        {
          "name": "18054",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18054"
        },
        {
          "name": "ADV-2005-2254",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2254"
        },
        {
          "name": "php-virtual-bypass-security(22924)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22924"
        },
        {
          "name": "16907",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16907"
        },
        {
          "name": "17371",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17371"
        },
        {
          "name": "ADV-2006-0791",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/0791"
        },
        {
          "name": "ADV-2006-4320",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4320"
        },
        {
          "name": "APPLE-SA-2006-03-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html"
        },
        {
          "name": "SUSE-SA:2005:069",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.securityfocus.com/archive/1/419504/100/0/threaded"
        },
        {
          "name": "20897",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/20897"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/release_4_4_1.php"
        },
        {
          "name": "TA06-062A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA06-062A.html"
        },
        {
          "name": "17510",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17510"
        },
        {
          "name": "GLSA-200511-08",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml"
        },
        {
          "name": "USN-232-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://www.ubuntu.com/usn/usn-232-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://docs.info.apple.com/article.html?artnum=303382"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3392",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safe_mode and open_basedir directives."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "22691",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22691"
            },
            {
              "name": "18198",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18198"
            },
            {
              "name": "SSRT061238",
              "refsource": "HP",
              "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
            },
            {
              "name": "HPSBMA02159",
              "refsource": "HP",
              "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
            },
            {
              "name": "525",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/525"
            },
            {
              "name": "15413",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15413"
            },
            {
              "name": "19064",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19064"
            },
            {
              "name": "18054",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18054"
            },
            {
              "name": "ADV-2005-2254",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/2254"
            },
            {
              "name": "php-virtual-bypass-security(22924)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22924"
            },
            {
              "name": "16907",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16907"
            },
            {
              "name": "17371",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17371"
            },
            {
              "name": "ADV-2006-0791",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/0791"
            },
            {
              "name": "ADV-2006-4320",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/4320"
            },
            {
              "name": "APPLE-SA-2006-03-01",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html"
            },
            {
              "name": "SUSE-SA:2005:069",
              "refsource": "SUSE",
              "url": "http://www.securityfocus.com/archive/1/419504/100/0/threaded"
            },
            {
              "name": "20897",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/20897"
            },
            {
              "name": "http://www.php.net/release_4_4_1.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/release_4_4_1.php"
            },
            {
              "name": "TA06-062A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA06-062A.html"
            },
            {
              "name": "17510",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17510"
            },
            {
              "name": "GLSA-200511-08",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml"
            },
            {
              "name": "USN-232-1",
              "refsource": "UBUNTU",
              "url": "https://www.ubuntu.com/usn/usn-232-1/"
            },
            {
              "name": "http://docs.info.apple.com/article.html?artnum=303382",
              "refsource": "CONFIRM",
              "url": "http://docs.info.apple.com/article.html?artnum=303382"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3392",
    "datePublished": "2005-11-01T11:00:00.000Z",
    "dateReserved": "2005-11-01T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:10:08.594Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-0996 (GCVE-0-2006-0996)

Vulnerability from cvelistv5 – Published: 2006-04-10 18:00 – Updated: 2024-08-07 16:56

Summary

Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents HTML tags from being removed.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

34 references

URL	Tags
http://securityreason.com/securityalert/675	third-party-advisoryx_refsource_SREASON
http://secunia.com/advisories/19775	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/21252	third-party-advisoryx_refsource_SECUNIA
http://www.osvdb.org/24484	vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/20222	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/20210	third-party-advisoryx_refsource_SECUNIA
http://www.php.net/ChangeLog-4.php#4.4.3	x_refsource_CONFIRM
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/17362	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2006-0276.html	vendor-advisoryx_refsource_REDHAT
http://security.gentoo.org/glsa/glsa-200605-08.xml	vendor-advisoryx_refsource_GENTOO
http://cvs.php.net/viewcvs.cgi/php-src/ext/standa…	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2006/1290	vdb-entryx_refsource_VUPEN
http://www.ubuntu.com/usn/usn-320-1	vendor-advisoryx_refsource_UBUNTU
http://www.redhat.com/support/errata/RHSA-2006-05…	vendor-advisoryx_refsource_REDHAT
http://securitytracker.com/id?1015879	vdb-entryx_refsource_SECTRACK
http://securityreason.com/achievement_securityalert/34	third-party-advisoryx_refsource_SREASONRES
http://secunia.com/advisories/19979	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2006-0549.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/20951	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/21125	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://secunia.com/advisories/19599	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/19832	third-party-advisoryx_refsource_SECUNIA
ftp://patches.sgi.com/support/free/security/advis…	vendor-advisoryx_refsource_SGI
http://cvs.php.net/viewcvs.cgi/php-src/ext/standa…	x_refsource_CONFIRM
http://secunia.com/advisories/20052	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/21564	third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.vupen.com/english/advisories/2006/2685	vdb-entryx_refsource_VUPEN
http://www.novell.com/linux/security/advisories/0…	vendor-advisoryx_refsource_SUSE
http://marc.info/?l=php-cvs&m=114374620416389&w=2	mailing-listx_refsource_MLIST

Date Public

2006-03-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:56:15.232Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "675",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/675"
          },
          {
            "name": "19775",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19775"
          },
          {
            "name": "21252",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21252"
          },
          {
            "name": "24484",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/24484"
          },
          {
            "name": "20222",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20222"
          },
          {
            "name": "20210",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20210"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-4.php#4.4.3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm"
          },
          {
            "name": "17362",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17362"
          },
          {
            "name": "RHSA-2006:0276",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2006-0276.html"
          },
          {
            "name": "GLSA-200605-08",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200605-08.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c?r1=1.260\u0026r2=1.261"
          },
          {
            "name": "ADV-2006-1290",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1290"
          },
          {
            "name": "USN-320-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-320-1"
          },
          {
            "name": "RHSA-2006:0501",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0501.html"
          },
          {
            "name": "1015879",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015879"
          },
          {
            "name": "20060408 phpinfo() Cross Site Scripting PHP 5.1.2 and 4.4.2",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/34"
          },
          {
            "name": "19979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19979"
          },
          {
            "name": "RHSA-2006:0549",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html"
          },
          {
            "name": "20951",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20951"
          },
          {
            "name": "21125",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21125"
          },
          {
            "name": "oval:org.mitre.oval:def:10997",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10997"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm"
          },
          {
            "name": "19599",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19599"
          },
          {
            "name": "MDKSA-2006:074",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:074"
          },
          {
            "name": "19832",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19832"
          },
          {
            "name": "20060501-01-U",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c"
          },
          {
            "name": "20052",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20052"
          },
          {
            "name": "21564",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21564"
          },
          {
            "name": "php-phpinfo-long-array-xss(25702)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25702"
          },
          {
            "name": "ADV-2006-2685",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/2685"
          },
          {
            "name": "SUSE-SA:2006:024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/05-05-2006.html"
          },
          {
            "name": "[php-cvs] 20060330 cvs: php-src /ext/standard info.c",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=php-cvs\u0026m=114374620416389\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-03-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents HTML tags from being removed."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-10T00:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "675",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/675"
        },
        {
          "name": "19775",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19775"
        },
        {
          "name": "21252",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21252"
        },
        {
          "name": "24484",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/24484"
        },
        {
          "name": "20222",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20222"
        },
        {
          "name": "20210",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20210"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-4.php#4.4.3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm"
        },
        {
          "name": "17362",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17362"
        },
        {
          "name": "RHSA-2006:0276",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2006-0276.html"
        },
        {
          "name": "GLSA-200605-08",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200605-08.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c?r1=1.260\u0026r2=1.261"
        },
        {
          "name": "ADV-2006-1290",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1290"
        },
        {
          "name": "USN-320-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-320-1"
        },
        {
          "name": "RHSA-2006:0501",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0501.html"
        },
        {
          "name": "1015879",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015879"
        },
        {
          "name": "20060408 phpinfo() Cross Site Scripting PHP 5.1.2 and 4.4.2",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/34"
        },
        {
          "name": "19979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19979"
        },
        {
          "name": "RHSA-2006:0549",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html"
        },
        {
          "name": "20951",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20951"
        },
        {
          "name": "21125",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21125"
        },
        {
          "name": "oval:org.mitre.oval:def:10997",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10997"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm"
        },
        {
          "name": "19599",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19599"
        },
        {
          "name": "MDKSA-2006:074",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:074"
        },
        {
          "name": "19832",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19832"
        },
        {
          "name": "20060501-01-U",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c"
        },
        {
          "name": "20052",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20052"
        },
        {
          "name": "21564",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21564"
        },
        {
          "name": "php-phpinfo-long-array-xss(25702)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25702"
        },
        {
          "name": "ADV-2006-2685",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/2685"
        },
        {
          "name": "SUSE-SA:2006:024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/05-05-2006.html"
        },
        {
          "name": "[php-cvs] 20060330 cvs: php-src /ext/standard info.c",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://marc.info/?l=php-cvs\u0026m=114374620416389\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-0996",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents HTML tags from being removed."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "675",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/675"
            },
            {
              "name": "19775",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19775"
            },
            {
              "name": "21252",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21252"
            },
            {
              "name": "24484",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/24484"
            },
            {
              "name": "20222",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20222"
            },
            {
              "name": "20210",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20210"
            },
            {
              "name": "http://www.php.net/ChangeLog-4.php#4.4.3",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-4.php#4.4.3"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm"
            },
            {
              "name": "17362",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17362"
            },
            {
              "name": "RHSA-2006:0276",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2006-0276.html"
            },
            {
              "name": "GLSA-200605-08",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200605-08.xml"
            },
            {
              "name": "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c?r1=1.260\u0026r2=1.261",
              "refsource": "CONFIRM",
              "url": "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c?r1=1.260\u0026r2=1.261"
            },
            {
              "name": "ADV-2006-1290",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1290"
            },
            {
              "name": "USN-320-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-320-1"
            },
            {
              "name": "RHSA-2006:0501",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0501.html"
            },
            {
              "name": "1015879",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015879"
            },
            {
              "name": "20060408 phpinfo() Cross Site Scripting PHP 5.1.2 and 4.4.2",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/34"
            },
            {
              "name": "19979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19979"
            },
            {
              "name": "RHSA-2006:0549",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html"
            },
            {
              "name": "20951",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20951"
            },
            {
              "name": "21125",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21125"
            },
            {
              "name": "oval:org.mitre.oval:def:10997",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10997"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm"
            },
            {
              "name": "19599",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19599"
            },
            {
              "name": "MDKSA-2006:074",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:074"
            },
            {
              "name": "19832",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19832"
            },
            {
              "name": "20060501-01-U",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc"
            },
            {
              "name": "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c",
              "refsource": "CONFIRM",
              "url": "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c"
            },
            {
              "name": "20052",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20052"
            },
            {
              "name": "21564",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21564"
            },
            {
              "name": "php-phpinfo-long-array-xss(25702)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25702"
            },
            {
              "name": "ADV-2006-2685",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/2685"
            },
            {
              "name": "SUSE-SA:2006:024",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/05-05-2006.html"
            },
            {
              "name": "[php-cvs] 20060330 cvs: php-src /ext/standard info.c",
              "refsource": "MLIST",
              "url": "http://marc.info/?l=php-cvs\u0026m=114374620416389\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-0996",
    "datePublished": "2006-04-10T18:00:00.000Z",
    "dateReserved": "2006-03-06T00:00:00.000Z",
    "dateUpdated": "2024-08-07T16:56:15.232Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-1017 (GCVE-0-2006-1017)

Vulnerability from cvelistv5 – Published: 2006-03-07 00:00 – Updated: 2024-08-07 16:56

Summary

The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the (1) safe_mode or (2) open_basedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imap_open function, allow remote attackers to obtain access to an IMAP stream data structure and conduct unauthorized IMAP actions.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

12 references

URL	Tags
http://www.vupen.com/english/advisories/2006/0772	vdb-entryx_refsource_VUPEN
http://www.php.net/release_5_1_5.php	x_refsource_CONFIRM
http://www.osvdb.org/23535	vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/21050	third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/516	third-party-advisoryx_refsource_SREASON
http://secunia.com/advisories/21546	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://bugs.php.net/bug.php?id=37265	x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.php.net/ChangeLog-5.php#5.1.5	x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/426339/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/18694	third-party-advisoryx_refsource_SECUNIA

Date Public

2006-02-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:56:15.379Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2006-0772",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/0772"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/release_5_1_5.php"
          },
          {
            "name": "23535",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/23535"
          },
          {
            "name": "21050",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21050"
          },
          {
            "name": "516",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/516"
          },
          {
            "name": "21546",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21546"
          },
          {
            "name": "MDKSA-2006:122",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.php.net/bug.php?id=37265"
          },
          {
            "name": "php-imap-restriction-bypass(24964)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24964"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php#5.1.5"
          },
          {
            "name": "20060228 (PHP) imap functions bypass safemode and open_basedir restrictions",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/426339/100/0/threaded"
          },
          {
            "name": "18694",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18694"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-02-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the (1) safe_mode or (2) open_basedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imap_open function, allow remote attackers to obtain access to an IMAP stream data structure and conduct unauthorized IMAP actions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-18T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2006-0772",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/0772"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/release_5_1_5.php"
        },
        {
          "name": "23535",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/23535"
        },
        {
          "name": "21050",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21050"
        },
        {
          "name": "516",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/516"
        },
        {
          "name": "21546",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21546"
        },
        {
          "name": "MDKSA-2006:122",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.php.net/bug.php?id=37265"
        },
        {
          "name": "php-imap-restriction-bypass(24964)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24964"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php#5.1.5"
        },
        {
          "name": "20060228 (PHP) imap functions bypass safemode and open_basedir restrictions",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/426339/100/0/threaded"
        },
        {
          "name": "18694",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18694"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-1017",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the (1) safe_mode or (2) open_basedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imap_open function, allow remote attackers to obtain access to an IMAP stream data structure and conduct unauthorized IMAP actions."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2006-0772",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/0772"
            },
            {
              "name": "http://www.php.net/release_5_1_5.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/release_5_1_5.php"
            },
            {
              "name": "23535",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/23535"
            },
            {
              "name": "21050",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21050"
            },
            {
              "name": "516",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/516"
            },
            {
              "name": "21546",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21546"
            },
            {
              "name": "MDKSA-2006:122",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122"
            },
            {
              "name": "http://bugs.php.net/bug.php?id=37265",
              "refsource": "CONFIRM",
              "url": "http://bugs.php.net/bug.php?id=37265"
            },
            {
              "name": "php-imap-restriction-bypass(24964)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24964"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php#5.1.5",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php#5.1.5"
            },
            {
              "name": "20060228 (PHP) imap functions bypass safemode and open_basedir restrictions",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/426339/100/0/threaded"
            },
            {
              "name": "18694",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18694"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-1017",
    "datePublished": "2006-03-07T00:00:00.000Z",
    "dateReserved": "2006-03-06T00:00:00.000Z",
    "dateUpdated": "2024-08-07T16:56:15.379Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-1490 (GCVE-0-2006-1490)

Vulnerability from cvelistv5 – Published: 2006-03-29 21:00 – Updated: 2024-08-07 17:12

Summary

PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user input in the html_entity_decode function and sends the encoded results back to the client, aka a "binary safety" issue. NOTE: this issue has been referred to as a "memory leak," but it is an information leak that discloses memory contents.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

32 references

URL	Tags
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.vupen.com/english/advisories/2006/4750	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/archive/1/429164/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/19499	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/17296	vdb-entryx_refsource_BID
http://secunia.com/advisories/20210	third-party-advisoryx_refsource_SECUNIA
http://docs.info.apple.com/article.html?artnum=304829	x_refsource_CONFIRM
http://cvs.php.net/viewcvs.cgi/php-src/ext/standa…	x_refsource_MISC
http://rhn.redhat.com/errata/RHSA-2006-0276.html	vendor-advisoryx_refsource_REDHAT
http://security.gentoo.org/glsa/glsa-200605-08.xml	vendor-advisoryx_refsource_GENTOO
http://secunia.com/advisories/19570	third-party-advisoryx_refsource_SECUNIA
http://cvs.php.net/viewcvs.cgi/php-src/ext/standa…	x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://secunia.com/advisories/19383	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/usn-320-1	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/23155	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19979	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/20951	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/21125	third-party-advisoryx_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/429162/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/19832	third-party-advisoryx_refsource_SECUNIA
ftp://patches.sgi.com/support/free/security/advis…	vendor-advisoryx_refsource_SGI
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.us-cert.gov/cas/techalerts/TA06-333A.html	third-party-advisoryx_refsource_CERT
http://bugs.gentoo.org/show_bug.cgi?id=127939	x_refsource_CONFIRM
http://secunia.com/advisories/20052	third-party-advisoryx_refsource_SECUNIA
http://www.trustix.org/errata/2006/0020	vendor-advisoryx_refsource_TRUSTIX
http://www.vupen.com/english/advisories/2006/2685	vdb-entryx_refsource_VUPEN
http://www.novell.com/linux/security/advisories/0…	vendor-advisoryx_refsource_SUSE
http://www.vupen.com/english/advisories/2006/1149	vdb-entryx_refsource_VUPEN

Date Public

2006-03-28 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T17:12:22.126Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "MDKSA-2006:063",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:063"
          },
          {
            "name": "oval:org.mitre.oval:def:11084",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11084"
          },
          {
            "name": "ADV-2006-4750",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4750"
          },
          {
            "name": "20060328 Critical PHP bug - act ASAP if you are running web with sensitive data",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/429164/100/0/threaded"
          },
          {
            "name": "19499",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19499"
          },
          {
            "name": "17296",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17296"
          },
          {
            "name": "20210",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20210"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://docs.info.apple.com/article.html?artnum=304829"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/html.c?r1=1.112\u0026r2=1.113"
          },
          {
            "name": "RHSA-2006:0276",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2006-0276.html"
          },
          {
            "name": "GLSA-200605-08",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200605-08.xml"
          },
          {
            "name": "19570",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19570"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/html.c?view=log"
          },
          {
            "name": "php-htmlentitydecode-information-disclosure(25508)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25508"
          },
          {
            "name": "19383",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19383"
          },
          {
            "name": "USN-320-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-320-1"
          },
          {
            "name": "23155",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/23155"
          },
          {
            "name": "19979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19979"
          },
          {
            "name": "20951",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20951"
          },
          {
            "name": "21125",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21125"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm"
          },
          {
            "name": "20060328 Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/429162/100/0/threaded"
          },
          {
            "name": "19832",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19832"
          },
          {
            "name": "20060501-01-U",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc"
          },
          {
            "name": "APPLE-SA-2006-11-28",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html"
          },
          {
            "name": "TA06-333A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA06-333A.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=127939"
          },
          {
            "name": "20052",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20052"
          },
          {
            "name": "2006-0020",
            "tags": [
              "vendor-advisory",
              "x_refsource_TRUSTIX",
              "x_transferred"
            ],
            "url": "http://www.trustix.org/errata/2006/0020"
          },
          {
            "name": "ADV-2006-2685",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/2685"
          },
          {
            "name": "SUSE-SA:2006:024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/05-05-2006.html"
          },
          {
            "name": "ADV-2006-1149",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1149"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-03-28T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user input in the html_entity_decode function and sends the encoded results back to the client, aka a \"binary safety\" issue.  NOTE: this issue has been referred to as a \"memory leak,\" but it is an information leak that discloses memory contents."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-18T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "MDKSA-2006:063",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:063"
        },
        {
          "name": "oval:org.mitre.oval:def:11084",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11084"
        },
        {
          "name": "ADV-2006-4750",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4750"
        },
        {
          "name": "20060328 Critical PHP bug - act ASAP if you are running web with sensitive data",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/429164/100/0/threaded"
        },
        {
          "name": "19499",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19499"
        },
        {
          "name": "17296",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17296"
        },
        {
          "name": "20210",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20210"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://docs.info.apple.com/article.html?artnum=304829"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/html.c?r1=1.112\u0026r2=1.113"
        },
        {
          "name": "RHSA-2006:0276",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2006-0276.html"
        },
        {
          "name": "GLSA-200605-08",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200605-08.xml"
        },
        {
          "name": "19570",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19570"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/html.c?view=log"
        },
        {
          "name": "php-htmlentitydecode-information-disclosure(25508)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25508"
        },
        {
          "name": "19383",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19383"
        },
        {
          "name": "USN-320-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-320-1"
        },
        {
          "name": "23155",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/23155"
        },
        {
          "name": "19979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19979"
        },
        {
          "name": "20951",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20951"
        },
        {
          "name": "21125",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21125"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm"
        },
        {
          "name": "20060328 Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/429162/100/0/threaded"
        },
        {
          "name": "19832",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19832"
        },
        {
          "name": "20060501-01-U",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc"
        },
        {
          "name": "APPLE-SA-2006-11-28",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html"
        },
        {
          "name": "TA06-333A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA06-333A.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=127939"
        },
        {
          "name": "20052",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20052"
        },
        {
          "name": "2006-0020",
          "tags": [
            "vendor-advisory",
            "x_refsource_TRUSTIX"
          ],
          "url": "http://www.trustix.org/errata/2006/0020"
        },
        {
          "name": "ADV-2006-2685",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/2685"
        },
        {
          "name": "SUSE-SA:2006:024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/05-05-2006.html"
        },
        {
          "name": "ADV-2006-1149",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1149"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-1490",
    "datePublished": "2006-03-29T21:00:00.000Z",
    "dateReserved": "2006-03-29T00:00:00.000Z",
    "dateUpdated": "2024-08-07T17:12:22.126Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-1494 (GCVE-0-2006-1494)

Vulnerability from cvelistv5 – Published: 2006-04-10 19:00 – Updated: 2024-08-07 17:12

Summary

Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

27 references

URL	Tags
http://secunia.com/advisories/21723	third-party-advisoryx_refsource_SECUNIA
https://issues.rpath.com/browse/RPL-683	x_refsource_CONFIRM
http://secunia.com/advisories/19775	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/21252	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/21202	third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/677	third-party-advisoryx_refsource_SREASON
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.vupen.com/english/advisories/2006/1290	vdb-entryx_refsource_VUPEN
http://www.redhat.com/support/errata/RHSA-2006-05…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/21135	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/usn-320-1	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/archive/1/447866/100…	mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/19979	third-party-advisoryx_refsource_SECUNIA
http://rhn.redhat.com/errata/RHSA-2006-0549.html	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/22225	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/21125	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19599	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://securityreason.com/achievement_securityalert/36	third-party-advisoryx_refsource_SREASONRES
http://secunia.com/advisories/21031	third-party-advisoryx_refsource_SECUNIA
http://securitytracker.com/id?1015881	vdb-entryx_refsource_SECTRACK
http://www.redhat.com/support/errata/RHSA-2006-05…	vendor-advisoryx_refsource_REDHAT
ftp://patches.sgi.com/support/free/security/advis…	vendor-advisoryx_refsource_SGI
http://support.avaya.com/elmodocs2/security/ASA-2…	x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.securityfocus.com/bid/17439	vdb-entryx_refsource_BID
http://www.novell.com/linux/security/advisories/0…	vendor-advisoryx_refsource_SUSE

Date Public

2006-04-08 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T17:12:22.139Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "21723",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21723"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-683"
          },
          {
            "name": "19775",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19775"
          },
          {
            "name": "21252",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21252"
          },
          {
            "name": "21202",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21202"
          },
          {
            "name": "677",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/677"
          },
          {
            "name": "php-tempnam-directory-traversal(25705)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25705"
          },
          {
            "name": "ADV-2006-1290",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/1290"
          },
          {
            "name": "RHSA-2006:0568",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0568.html"
          },
          {
            "name": "21135",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21135"
          },
          {
            "name": "USN-320-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-320-1"
          },
          {
            "name": "20061005 rPSA-2006-0182-1 php php-mysql php-pgsql",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/447866/100/0/threaded"
          },
          {
            "name": "19979",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19979"
          },
          {
            "name": "RHSA-2006:0549",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html"
          },
          {
            "name": "22225",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22225"
          },
          {
            "name": "21125",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21125"
          },
          {
            "name": "19599",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19599"
          },
          {
            "name": "MDKSA-2006:074",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:074"
          },
          {
            "name": "20060408 tempnam() open_basedir bypass PHP 4.4.2 and 5.1.2",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASONRES",
              "x_transferred"
            ],
            "url": "http://securityreason.com/achievement_securityalert/36"
          },
          {
            "name": "21031",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21031"
          },
          {
            "name": "1015881",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015881"
          },
          {
            "name": "RHSA-2006:0567",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0567.html"
          },
          {
            "name": "20060701-01-U",
            "tags": [
              "vendor-advisory",
              "x_refsource_SGI",
              "x_transferred"
            ],
            "url": "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm"
          },
          {
            "name": "oval:org.mitre.oval:def:10196",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10196"
          },
          {
            "name": "17439",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17439"
          },
          {
            "name": "SUSE-SA:2006:024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/05-05-2006.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-04-08T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-18T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "21723",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21723"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-683"
        },
        {
          "name": "19775",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19775"
        },
        {
          "name": "21252",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21252"
        },
        {
          "name": "21202",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21202"
        },
        {
          "name": "677",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/677"
        },
        {
          "name": "php-tempnam-directory-traversal(25705)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25705"
        },
        {
          "name": "ADV-2006-1290",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/1290"
        },
        {
          "name": "RHSA-2006:0568",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0568.html"
        },
        {
          "name": "21135",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21135"
        },
        {
          "name": "USN-320-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-320-1"
        },
        {
          "name": "20061005 rPSA-2006-0182-1 php php-mysql php-pgsql",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/447866/100/0/threaded"
        },
        {
          "name": "19979",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19979"
        },
        {
          "name": "RHSA-2006:0549",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html"
        },
        {
          "name": "22225",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22225"
        },
        {
          "name": "21125",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21125"
        },
        {
          "name": "19599",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19599"
        },
        {
          "name": "MDKSA-2006:074",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:074"
        },
        {
          "name": "20060408 tempnam() open_basedir bypass PHP 4.4.2 and 5.1.2",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASONRES"
          ],
          "url": "http://securityreason.com/achievement_securityalert/36"
        },
        {
          "name": "21031",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21031"
        },
        {
          "name": "1015881",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015881"
        },
        {
          "name": "RHSA-2006:0567",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0567.html"
        },
        {
          "name": "20060701-01-U",
          "tags": [
            "vendor-advisory",
            "x_refsource_SGI"
          ],
          "url": "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm"
        },
        {
          "name": "oval:org.mitre.oval:def:10196",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10196"
        },
        {
          "name": "17439",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17439"
        },
        {
          "name": "SUSE-SA:2006:024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/05-05-2006.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-1494",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "21723",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21723"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-683",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-683"
            },
            {
              "name": "19775",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19775"
            },
            {
              "name": "21252",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21252"
            },
            {
              "name": "21202",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21202"
            },
            {
              "name": "677",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/677"
            },
            {
              "name": "php-tempnam-directory-traversal(25705)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25705"
            },
            {
              "name": "ADV-2006-1290",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/1290"
            },
            {
              "name": "RHSA-2006:0568",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0568.html"
            },
            {
              "name": "21135",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21135"
            },
            {
              "name": "USN-320-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-320-1"
            },
            {
              "name": "20061005 rPSA-2006-0182-1 php php-mysql php-pgsql",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/447866/100/0/threaded"
            },
            {
              "name": "19979",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19979"
            },
            {
              "name": "RHSA-2006:0549",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html"
            },
            {
              "name": "22225",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22225"
            },
            {
              "name": "21125",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21125"
            },
            {
              "name": "19599",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19599"
            },
            {
              "name": "MDKSA-2006:074",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:074"
            },
            {
              "name": "20060408 tempnam() open_basedir bypass PHP 4.4.2 and 5.1.2",
              "refsource": "SREASONRES",
              "url": "http://securityreason.com/achievement_securityalert/36"
            },
            {
              "name": "21031",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21031"
            },
            {
              "name": "1015881",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015881"
            },
            {
              "name": "RHSA-2006:0567",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0567.html"
            },
            {
              "name": "20060701-01-U",
              "refsource": "SGI",
              "url": "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm"
            },
            {
              "name": "oval:org.mitre.oval:def:10196",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10196"
            },
            {
              "name": "17439",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/17439"
            },
            {
              "name": "SUSE-SA:2006:024",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/05-05-2006.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-1494",
    "datePublished": "2006-04-10T19:00:00.000Z",
    "dateReserved": "2006-03-29T00:00:00.000Z",
    "dateUpdated": "2024-08-07T17:12:22.139Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OPENSUSE-SU-2024:11167-1

CVE-2005-3353 (GCVE-0-2005-3353)

CVE-2005-3388 (GCVE-0-2005-3388)

CVE-2005-3389 (GCVE-0-2005-3389)

CVE-2005-3390 (GCVE-0-2005-3390)

CVE-2005-3391 (GCVE-0-2005-3391)

CVE-2005-3392 (GCVE-0-2005-3392)

CVE-2006-0996 (GCVE-0-2006-0996)

CVE-2006-1017 (GCVE-0-2006-1017)

CVE-2006-1490 (GCVE-0-2006-1490)

CVE-2006-1494 (GCVE-0-2006-1494)

Tags

Sightings

Nomenclature

Related by attack behaviour