PT-2010-4522 · Php+1 · Php+1

Published 2010-08-20 · Updated 2010-12-10 · CVE-2010-3065

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP versions 5.2 through 5.2.13 PHP versions 5.3 through 5.3.2

Description The issue arises from the default session serializer in PHP not properly handling the PS UNDEF MARKER marker. This allows attackers to modify arbitrary session variables by using a crafted session variable name.

Recommendations For PHP versions 5.2 through 5.2.13, update to a version outside of this range to resolve the issue. For PHP versions 5.3 through 5.3.2, update to a version outside of this range to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-3065

DSA-2089-1

RHSA-2010:0919

RHSA-2010_0919

Affected Products

Php

Red Hat

References · 29

• 🔥 http://php-security.org/2010/05/31/mops-2010-060-php-session-serializer-session-data-injection-vulnerability/index.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-3065 · Security Note
• http://debian.org/security/2010/dsa-2089 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2010-0919.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02600 · Security Note
• http://bugs.php.net/bug.php?id=49687 · Note
• http://securityfocus.com/bid/38708 · Note
• https://access.redhat.com/errata/RHSA-2010:0919 · Note
• http://blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf · Note
• http://sirdarckcat.blogspot.com/2009/10/couple-of-unicode-issues-on-php-and.html · Note
• https://access.redhat.com/security/cve/CVE-2010-1128 · Note
• http://bugs.php.net/bug.php?id=48230 · Note
• http://vupen.com/english/advisories/2010/3081 · Note