blogsafe.org My Downloads

BlogSafe.org

PHP CVEs

Vulnerabilities in the PHP language itself, and which PHP versions they affect.

← Back to CVE list

CVE-2011-0441

MEDIUM 6.3 CVSS 2.0
Published
March 29, 2011
Last modified
June 16, 2026
NVD status
Modified
Reported by
cve@mitre.org
Weakness
CWE-59
CVSS vector
AV:L/AC:M/Au:N/C:N/I:C/A:C

Description

The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/.

Affected products and versions

  • PHP versions 5.3.5

References