CVE-2005-3392

Published: Nov 1, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safe_mode and open_basedir directives.

Affected (54)

Products: Php: Php

1 product

Configuration A

54 vulnerable

Vulnerable Software	Affected Versions
Php Php	Version 3.0.10
Php Php	Version 3.0.11
Php Php	Version 3.0.12
Php Php	Version 3.0.13
Php Php	Version 3.0.14
Php Php	Version 3.0.15
Php Php	Version 3.0.16
Php Php	Version 3.0.17
Php Php	Version 3.0.18
Php Php	Version 3.0.1
Php Php	Version 3.0.2
Php Php	Version 3.0.3
Php Php	Version 3.0.4
Php Php	Version 3.0.5
Php Php	Version 3.0.6
Php Php	Version 3.0.7
Php Php	Version 3.0.8
Php Php	Version 3.0.9
Php Php	Version 3.0
Php Php	Version 4.0.0
Php Php	Version 4.0.1
Php Php	Version 4.0.1 patch1
Php Php	Version 4.0.1 patch2
Php Php	Version 4.0.2
Php Php	Version 4.0.3
Php Php	Version 4.0.3 patch1
Php Php	Version 4.0.4
Php Php	Version 4.0.5
Php Php	Version 4.0.6
Php Php	Version 4.0.7
Php Php	Version 4.0.7 rc1
Php Php	Version 4.0.7 rc2
Php Php	Version 4.0.7 rc3
Php Php	Version 4.1.0
Php Php	Version 4.1.1
Php Php	Version 4.1.2
Php Php	Version 4.2.0
Php Php	Version 4.2.1
Php Php	Version 4.2.2
Php Php	Version 4.2.3
Php Php	Version 4.2
Php Php	Version 4.3.0
Php Php	Version 4.3.10
Php Php	Version 4.3.11
Php Php	Version 4.3.1
Php Php	Version 4.3.2
Php Php	Version 4.3.3
Php Php	Version 4.3.4
Php Php	Version 4.3.5
Php Php	Version 4.3.6
Php Php	Version 4.3.7
Php Php	Version 4.3.8
Php Php	Version 4.3.9
Php Php	Version 4.4.0

References (44)

http://docs.info.apple.com/article.html?artnum=303382

Source: cve@mitre.org

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html

Source: cve@mitre.org

http://secunia.com/advisories/17371

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/17510

Source: cve@mitre.org

http://secunia.com/advisories/18054

Source: cve@mitre.org

http://secunia.com/advisories/18198

Source: cve@mitre.org

http://secunia.com/advisories/19064

Source: cve@mitre.org

http://secunia.com/advisories/22691

Source: cve@mitre.org

http://securityreason.com/securityalert/525

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml

Source: cve@mitre.org

http://www.osvdb.org/20897

Source: cve@mitre.org

http://www.php.net/release_4_4_1.php

Source: cve@mitre.org

Patch

http://www.securityfocus.com/archive/1/419504/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/15413

Source: cve@mitre.org

http://www.securityfocus.com/bid/16907

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA06-062A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2005/2254

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0791

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/4320

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/22924

Source: cve@mitre.org

https://www.ubuntu.com/usn/usn-232-1/

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=303382

Source: af854a3a-2127-422b-91ae-364da2661108

http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17371

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/17510

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18054

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/18198

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19064

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/22691

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/525

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/20897

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.php.net/release_4_4_1.php

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/archive/1/419504/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15413

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16907

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA06-062A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2005/2254

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/0791

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/4320

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/22924

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.ubuntu.com/usn/usn-232-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.