CVE-2012-1171

🗓️ 15 Feb 2014 11:00:00Reported by redhatType

cve

cve🔗 web.nvd.nist.gov👁 250 Views

The libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open_basedir protection

Reporter	Title	Published	Views	Family All 12
Cvelist	CVE-2012-1171	15 Feb 201411:00	–	cvelist
EUVD	EUVD-2012-1201	7 Oct 202500:30	–	euvd
F5 Networks	K15635: PHP 5.x vulnerability - CVE-2012-1171	21 Feb 202318:30	–	f5
F5 Networks	SOL15635 - PHP 5.x vulnerability - CVE-2012-1171	29 Sep 201400:00	–	f5
NVD	CVE-2012-1171	15 Feb 201414:57	–	nvd
OpenVAS	PHP 'open_basedir' Security Bypass Vulnerability	19 Feb 201400:00	–	openvas
Tenable Nessus	PHP PHP_RSHUTDOWN_FUNCTION Security Bypass	1 Apr 201400:00	–	nessus
Prion	Design/Logic Flaw	15 Feb 201414:57	–	prion
Rosalinux	Advisory ROSA-SA-2021-1950	2 Jul 202117:57	–	rosalinux
seebug.org	PHP libxml RSHUTDOWN安全限制绕过漏洞(CVE-2012-1171)	21 Feb 201400:00	–	seebug

NVD

Node

php phpMatch5.0.0

OR

php phpMatch5.0.0beta1

OR

php phpMatch5.0.0beta2

OR

php phpMatch5.0.0beta3

OR

php phpMatch5.0.0beta4

OR

php phpMatch5.0.0rc1

OR

php phpMatch5.0.0rc2

OR

php phpMatch5.0.0rc3

OR

php phpMatch5.0.1

OR

php phpMatch5.0.2

OR

php phpMatch5.0.3

OR

php phpMatch5.0.4

OR

php phpMatch5.0.5

OR

php phpMatch5.1.0

OR

php phpMatch5.1.1

OR

php phpMatch5.1.2

OR

php phpMatch5.1.3

OR

php phpMatch5.1.4

OR

php phpMatch5.1.5

OR

php phpMatch5.1.6

OR

php phpMatch5.2.0

OR

php phpMatch5.2.1

OR

php phpMatch5.2.2

OR

php phpMatch5.2.3

OR

php phpMatch5.2.4

OR

php phpMatch5.2.5

OR

php phpMatch5.2.6

OR

php phpMatch5.2.7

OR

php phpMatch5.2.8

OR

php phpMatch5.2.9

OR

php phpMatch5.2.10

OR

php phpMatch5.2.11

OR

php phpMatch5.2.12

OR

php phpMatch5.2.13

OR

php phpMatch5.2.14

OR

php phpMatch5.2.15

OR

php phpMatch5.2.16

OR

php phpMatch5.2.17

OR

php phpMatch5.3.0

OR

php phpMatch5.3.1

OR

php phpMatch5.3.2

OR

php phpMatch5.3.3

OR

php phpMatch5.3.4

OR

php phpMatch5.3.5

OR

php phpMatch5.3.6

OR

php phpMatch5.3.7

OR

php phpMatch5.3.8

OR

php phpMatch5.3.9

OR

php phpMatch5.3.10

OR

php phpMatch5.3.11

OR

php phpMatch5.3.12

OR

php phpMatch5.3.13

OR

php phpMatch5.3.14

OR

php phpMatch5.3.15

OR

php phpMatch5.3.16

OR

php phpMatch5.3.17

OR

php phpMatch5.3.18

OR

php phpMatch5.3.19

OR

php phpMatch5.3.20

OR

php phpMatch5.3.21

OR

php phpMatch5.3.22

OR

php phpMatch5.3.23

OR

php phpMatch5.3.24

OR

php phpMatch5.3.25

OR

php phpMatch5.3.26

OR

php phpMatch5.3.27

OR

php phpMatch5.4.0

OR

php phpMatch5.4.1

OR

php phpMatch5.4.2

OR

php phpMatch5.4.3

OR

php phpMatch5.4.4

OR

php phpMatch5.4.5

OR

php phpMatch5.4.6

OR

php phpMatch5.4.7

OR

php phpMatch5.4.8

OR

php phpMatch5.4.9

OR

php phpMatch5.4.10

OR

php phpMatch5.4.11

OR

php phpMatch5.4.12

OR

php phpMatch5.4.12rc1

OR

php phpMatch5.4.12rc2

OR

php phpMatch5.4.13

OR

php phpMatch5.4.13rc1

OR

php phpMatch5.4.14

OR

php phpMatch5.4.14rc1

OR

php phpMatch5.4.15rc1

OR

php phpMatch5.4.16rc1

OR

php phpMatch5.4.17

OR

php phpMatch5.4.18

OR

php phpMatch5.4.19

OR

php phpMatch5.4.20

OR

php phpMatch5.4.21

OR

php phpMatch5.4.22

OR

php phpMatch5.4.23

OR

php phpMatch5.5.0alpha1

OR

php phpMatch5.5.0alpha2

OR

php phpMatch5.5.0alpha3

OR

php phpMatch5.5.0alpha4

OR

php phpMatch5.5.0alpha5

OR

php phpMatch5.5.0alpha6

OR

php phpMatch5.5.0beta1

OR

php phpMatch5.5.0beta2

OR

php phpMatch5.5.0beta3

OR

php phpMatch5.5.0beta4

OR

php phpMatch5.5.0rc1

OR

php phpMatch5.5.0rc2

OR

php phpMatch5.5.1

OR

php phpMatch5.5.2

OR

php phpMatch5.5.3

OR

php phpMatch5.5.4

OR

php phpMatch5.5.5

OR

php phpMatch5.5.6

Source	Link
github	www.github.com/php/php-src/blob/master/ext/libxml/tests/bug61367-write.phpt
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugs	www.bugs.php.net/bug.php
github	www.github.com/php/php-src/blob/master/ext/libxml/tests/bug61367-read.phpt

29 Apr 2026 01:13Current

6.7Medium risk

Vulners AI Score6.7

CVSS 25

EPSS0.00162

cve-2012-1171 libxml rshutdown php 5.x remote attackers open_basedir protection mechanism arbitrary files stream_close custom stream wrapper