PT-2011-4415 · Php · Php

Vincent Danen · Publicado 2011-11-03 · Atualizado 2024-06-15 · CVE-2011-3379

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions 5.3.7 through 5.3.8

Description The issue allows remote attackers to execute arbitrary code by providing a crafted URL. This is made possible by the is a function triggering a call to the autoload function, which can lead to potentially unsafe behavior in certain PEAR packages and custom autoloaders.

Recommendations For PHP versions 5.3.7 and 5.3.8, consider disabling the autoload function or restricting its use until a patch is available. Additionally, review and update any custom autoloaders to prevent potentially unsafe behavior.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2011-3379

OPENSUSE-SU-2024:10290-1

OPENSUSE-SU-2024:10344-1

OPENSUSE-SU-2024:11169-1

Produtos afetados

Php

Referências · 127

• 🔥 http://byte.nl/blog/2011/09/23/security-bug-in-is_a-function-in-php-5-3-7-5-3-8 · Exploit
• 🔥 https://bugs.php.net/bug.php?id=55475 · Exploit
• https://suse.com/security/cve/CVE-2014-3622 · Nota
• https://suse.com/security/cve/CVE-2019-9020 · Nota
• https://suse.com/security/cve/CVE-2010-2225 · Nota
• https://suse.com/security/cve/CVE-2012-3365 · Nota
• https://suse.com/security/cve/CVE-2010-3710 · Nota
• https://suse.com/security/cve/CVE-2006-1494 · Nota
• https://suse.com/security/cve/CVE-2015-3415 · Nota
• https://suse.com/security/cve/CVE-2020-7063 · Nota
• https://suse.com/security/cve/CVE-2012-2336 · Nota
• https://suse.com/security/cve/CVE-2019-11039 · Nota
• https://suse.com/security/cve/CVE-2011-3379 · Nota
• https://suse.com/security/cve/CVE-2013-1643 · Nota
• https://suse.com/security/cve/CVE-2019-9024 · Nota