CVE-2009-0754

🗓️ 03 Mar 2009 00:00:00Reported by ubuntu.comType

PHP versions 4.4.4, 5.1.6, and others allow local users to modify the behavior of other sites on the same server by changing mbstring.func_overload setting in .htacces

Reporter	Title	Published	Views	Family All 90
Veracode	Authorization Bypass	10 Apr 202000:31	–	veracode
Tenable Nessus	Mandriva Linux Security Advisory : php (MDVSA-2009:066)	23 Apr 200900:00	–	nessus
Tenable Nessus	SuSE 10 Security Update : PHP5 (ZYPP Patch Number 6069)	24 Sep 200900:00	–	nessus
Tenable Nessus	SuSE 11 Security Update : PHP5 (SAT Patch Number 666)	24 Sep 200900:00	–	nessus
Tenable Nessus	openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-6068)	3 Apr 200900:00	–	nessus
Tenable Nessus	openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-593)	21 Jul 200900:00	–	nessus
Tenable Nessus	openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-593)	21 Jul 200900:00	–	nessus
Tenable Nessus	Ubuntu 6.06 LTS / 8.04 LTS / 8.10 : php5 vulnerabilities (USN-761-1)	23 Apr 200900:00	–	nessus
Tenable Nessus	Oracle Linux 3 / 4 : php (ELSA-2009-0337)	12 Jul 201300:00	–	nessus
Tenable Nessus	PHP < 4.4.9 Multiple Vulnerabilities	8 Aug 200800:00	–	nessus

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-761-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2009-0754
launchpad	www.launchpad.net/bugs/cve/CVE-2009-0754
security-tracker	www.security-tracker.debian.org/tracker/CVE-2009-0754

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	6.06	noarch	php5	5.1.2-1ubuntu3.14	UNKNOWN
ubuntu	8.04	noarch	php5	5.2.4-2ubuntu5.6	UNKNOWN
ubuntu	8.10	noarch	php5	5.2.6-2ubuntu4.2	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

03 Mar 2009 00:00Current

1.5Low risk

Vulners AI Score1.5

CVSS22.1

EPSS0.000