CVE-2005-3392
HIGH
7.5
CVSS 2.0
Description
Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safe_mode and open_basedir directives.
Affected products and versions
- PHP versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, 3.0.12, 3.0.13, 3.0.14, 3.0.15, 3.0.16, 3.0.17, 3.0.18, 4.0.0, 4.0.1, 4.0.1patch1, 4.0.1patch2, 4.0.2, 4.0.3, 4.0.3patch1, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.0.7rc1, 4.0.7rc2, 4.0.7rc3, 4.1.0, 4.1.1, 4.1.2, 4.2, 4.2.0, 4.2.1, 4.2.2, 4.2.3, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.7, 4.3.8, 4.3.9, 4.3.10, 4.3.11, 4.4.0
References
- docs.info.apple.com http://docs.info.apple.com/article.html?artnum=303382
- itrc.hp.com http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522
- lists.apple.com http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html
- secunia.com http://secunia.com/advisories/17371 Patch, Vendor Advisory
- secunia.com http://secunia.com/advisories/17510
- secunia.com http://secunia.com/advisories/18054
- secunia.com http://secunia.com/advisories/18198
- secunia.com http://secunia.com/advisories/19064
- secunia.com http://secunia.com/advisories/22691
- securityreason.com http://securityreason.com/securityalert/525
- www.gentoo.org http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml
- www.osvdb.org http://www.osvdb.org/20897
- www.php.net http://www.php.net/release_4_4_1.php Patch
- www.securityfocus.com http://www.securityfocus.com/archive/1/419504/100/0/threaded
- www.securityfocus.com http://www.securityfocus.com/bid/15413
- www.securityfocus.com http://www.securityfocus.com/bid/16907
- www.us-cert.gov http://www.us-cert.gov/cas/techalerts/TA06-062A.html US Government Resource
- www.vupen.com http://www.vupen.com/english/advisories/2005/2254
- www.vupen.com http://www.vupen.com/english/advisories/2006/0791
- www.vupen.com http://www.vupen.com/english/advisories/2006/4320
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/22924
- www.ubuntu.com https://www.ubuntu.com/usn/usn-232-1/
- nvd.nist.gov Official NVD record