← Back

CVE-2012-1171

nvd nist
Published: Feb 15, 2014Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

The libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open_basedir protection mechanism and read arbitrary files via vectors involving a stream_close method call during use of a custom stream wrapper.

Affected (112)

Products: Php: Php
1 product
Php
Configuration A
112 vulnerable
Vulnerable SoftwareAffected Versions
Php
Version 5.0.0
Version 5.0.0 beta1
Version 5.0.0 beta2
Version 5.0.0 beta3
Version 5.0.0 beta4
Version 5.0.0 rc1
Version 5.0.0 rc2
Version 5.0.0 rc3
Version 5.0.1
Version 5.0.2
Version 5.0.3
Version 5.0.4
Version 5.0.5
Version 5.1.0
Version 5.1.1
Version 5.1.2
Version 5.1.3
Version 5.1.4
Version 5.1.5
Version 5.1.6
Version 5.2.0
Version 5.2.10
Version 5.2.11
Version 5.2.12
Version 5.2.13
Version 5.2.14
Version 5.2.15
Version 5.2.16
Version 5.2.17
Version 5.2.1
Version 5.2.2
Version 5.2.3
Version 5.2.4
Version 5.2.5
Version 5.2.6
Version 5.2.7
Version 5.2.8
Version 5.2.9
Version 5.3.0
Version 5.3.10
Version 5.3.11
Version 5.3.12
Version 5.3.13
Version 5.3.14
Version 5.3.15
Version 5.3.16
Version 5.3.17
Version 5.3.18
Version 5.3.19
Version 5.3.1
Version 5.3.20
Version 5.3.21
Version 5.3.22
Version 5.3.23
Version 5.3.24
Version 5.3.25
Version 5.3.26
Version 5.3.27
Version 5.3.2
Version 5.3.3
Version 5.3.4
Version 5.3.5
Version 5.3.6
Version 5.3.7
Version 5.3.8
Version 5.3.9
Version 5.4.0
Version 5.4.10
Version 5.4.11
Version 5.4.12
Version 5.4.12 rc1
Version 5.4.12 rc2
Version 5.4.13
Version 5.4.13 rc1
Version 5.4.14
Version 5.4.14 rc1
Version 5.4.15 rc1
Version 5.4.16 rc1
Version 5.4.17
Version 5.4.18
Version 5.4.19
Version 5.4.1
Version 5.4.20
Version 5.4.21
Version 5.4.22
Version 5.4.23
Version 5.4.2
Version 5.4.3
Version 5.4.4
Version 5.4.5
Version 5.4.6
Version 5.4.7
Version 5.4.8
Version 5.4.9
Version 5.5.0 alpha1
Version 5.5.0 alpha2
Version 5.5.0 alpha3
Version 5.5.0 alpha4
Version 5.5.0 alpha5
Version 5.5.0 alpha6
Version 5.5.0 beta1
Version 5.5.0 beta2
Version 5.5.0 beta3
Version 5.5.0 beta4
Version 5.5.0 rc1
Version 5.5.0 rc2
Version 5.5.1
Version 5.5.2
Version 5.5.3
Version 5.5.4
Version 5.5.5
Version 5.5.6

References (8)

Timeline

No history available yet.