CVE-2012-0057

Published: Feb 2, 2012Modified: Apr 29, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension.

Affected (47)

Products: Php: Php

1 product

Configuration A

47 vulnerable

Vulnerable Software	Affected Versions
Php Php	Up to 5.3.8
Php Php	Version 5.0.0
Php Php	Version 5.0.0 beta1
Php Php	Version 5.0.0 beta2
Php Php	Version 5.0.0 beta3
Php Php	Version 5.0.0 beta4
Php Php	Version 5.0.0 rc1
Php Php	Version 5.0.0 rc2
Php Php	Version 5.0.0 rc3
Php Php	Version 5.0.1
Php Php	Version 5.0.2
Php Php	Version 5.0.3
Php Php	Version 5.0.4
Php Php	Version 5.0.5
Php Php	Version 5.1.0
Php Php	Version 5.1.1
Php Php	Version 5.1.2
Php Php	Version 5.1.3
Php Php	Version 5.1.4
Php Php	Version 5.1.5
Php Php	Version 5.1.6
Php Php	Version 5.2.0
Php Php	Version 5.2.10
Php Php	Version 5.2.11
Php Php	Version 5.2.12
Php Php	Version 5.2.13
Php Php	Version 5.2.14
Php Php	Version 5.2.15
Php Php	Version 5.2.16
Php Php	Version 5.2.17
Php Php	Version 5.2.1
Php Php	Version 5.2.2
Php Php	Version 5.2.3
Php Php	Version 5.2.4
Php Php	Version 5.2.5
Php Php	Version 5.2.6
Php Php	Version 5.2.7
Php Php	Version 5.2.8
Php Php	Version 5.2.9
Php Php	Version 5.3.0
Php Php	Version 5.3.1
Php Php	Version 5.3.2
Php Php	Version 5.3.3
Php Php	Version 5.3.4
Php Php	Version 5.3.5
Php Php	Version 5.3.6
Php Php	Version 5.3.7

Related CWEs

References (42)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00001.html

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/01/13/10

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/01/13/4

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/01/13/5

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/01/13/6

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/01/13/7

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/01/14/1

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/01/14/2

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/01/14/3

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/01/15/1

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/01/15/10

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/01/15/2

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/01/18/3

Source: secalert@redhat.com

http://php.net/ChangeLog-5.php#5.3.9

Source: secalert@redhat.com

http://secunia.com/advisories/48668

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2399

Source: secalert@redhat.com

https://bugs.php.net/bug.php?id=54446

Source: secalert@redhat.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/72908

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/01/13/10

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/01/13/4

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/01/13/5

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/01/13/6

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/01/13/7

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/01/14/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/01/14/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/01/14/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/01/15/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/01/15/10

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/01/15/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/01/18/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://php.net/ChangeLog-5.php#5.3.9

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/48668

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2012/dsa-2399

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.php.net/bug.php?id=54446

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/72908

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.