Published: 09/11/2010 Updated: 01/09/2022

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

fopen_wrappers.c in PHP 5.3.x up to and including 5.3.3 might allow remote malicious users to bypass open_basedir restrictions via vectors related to the length of a filename.

Vulnerable Product	Search on Vulmon	Subscribe to Product
php php
canonical ubuntu linux 10.10
canonical ubuntu linux 9.10
canonical ubuntu linux 8.04
canonical ubuntu linux 10.04
canonical ubuntu linux 6.06

Debian Bug report logs - #603751 Three more security issues Package: php5; Maintainer for php5 is Debian PHP Maintainers <pkg-php-maint@listsaliothdebianorg>; Source for php5 is src:php5 (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Tue, 16 Nov 2010 22:33:02 UTC Severity: important ...

USN-1042-1 fixed vulnerabilities in PHP5 The fix for CVE-2010-3436 introduced a regression in the open_basedir restriction handling code This update fixes the problem ...

It was discovered that an integer overflow in the XML UTF-8 decoding code could allow an attacker to bypass cross-site scripting (XSS) protections This issue only affected Ubuntu 606 LTS, Ubuntu 804 LTS, and Ubuntu 910 (CVE-2009-5016) ...

CWE-264 http://www.mandriva.com/security/advisories?name=MDVSA-2010:218 http://svn.php.net/viewvc/php/php-src/trunk/main/fopen_wrappers.c?r1=303824&r2=303823&pathrev=303824 http://svn.php.net/viewvc?view=revision&revision=303824 http://security-tracker.debian.org/tracker/CVE-2010-3436 http://www.securityfocus.com/bid/44723 http://secunia.com/advisories/42729 http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.490619 http://www.vupen.com/english/advisories/2010/3313 http://www.php.net/ChangeLog-5.php http://www.php.net/releases/5_3_4.php http://www.vupen.com/english/advisories/2011/0077 http://www.php.net/archive/2010.php#id2010-12-10-1 http://secunia.com/advisories/42812 http://www.php.net/releases/5_2_15.php http://www.ubuntu.com/usn/USN-1042-1 http://support.apple.com/kb/HT4581 http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html http://support.apple.com/kb/HT5002 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=603751 https://nvd.nist.gov https://usn.ubuntu.com/1042-2/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-3436

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect