CVE-2005-3391
HIGH
7.5
CVSS 2.0
Description
Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and open_basedir restrictions via unknown attack vectors in (1) ext/curl and (2) ext/gd.
Affected products and versions
- PHP versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, 3.0.12, 3.0.13, 3.0.14, 3.0.15, 3.0.16, 3.0.17, 3.0.18, 4.0.0, 4.0.1, 4.0.1patch1, 4.0.1patch2, 4.0.2, 4.0.3, 4.0.3patch1, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.0.7rc1, 4.0.7rc2, 4.0.7rc3, 4.1.0, 4.1.1, 4.1.2, 4.2, 4.2.0, 4.2.1, 4.2.2, 4.2.3, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.7, 4.3.8, 4.3.9, 4.3.10, 4.3.11, 4.4.0
References
- docs.info.apple.com http://docs.info.apple.com/article.html?artnum=303382
- itrc.hp.com http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522
- lists.apple.com http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html
- secunia.com http://secunia.com/advisories/17371 Patch, Vendor Advisory
- secunia.com http://secunia.com/advisories/17510
- secunia.com http://secunia.com/advisories/18054
- secunia.com http://secunia.com/advisories/18198
- secunia.com http://secunia.com/advisories/18763
- secunia.com http://secunia.com/advisories/19064
- secunia.com http://secunia.com/advisories/22691
- securityreason.com http://securityreason.com/securityalert/525
- www.gentoo.org http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml
- www.openpkg.org http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html
- www.osvdb.org http://www.osvdb.org/20898
- www.php.net http://www.php.net/release_4_4_1.php Patch
- www.securityfocus.com http://www.securityfocus.com/archive/1/419504/100/0/threaded
- www.securityfocus.com http://www.securityfocus.com/bid/15411
- www.securityfocus.com http://www.securityfocus.com/bid/16907
- www.us-cert.gov http://www.us-cert.gov/cas/techalerts/TA06-062A.html US Government Resource
- www.vupen.com http://www.vupen.com/english/advisories/2005/2254
- www.vupen.com http://www.vupen.com/english/advisories/2006/0791
- www.vupen.com http://www.vupen.com/english/advisories/2006/4320
- wwwnew.mandriva.com http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:035
- www.ubuntu.com https://www.ubuntu.com/usn/usn-232-1/
- nvd.nist.gov Official NVD record