Lucene search

CVE-2010-2094

🗓️ 27 May 2010 00:00:00Reported by ubuntu.comType

Multiple format string vulnerabilities in PHP 5.3 phar extension, pre 5.3.2, allow sensitive data disclosure and potential arbitrary code execution via crafted phar:// URI

Reporter	Title	Published	Views	Family All 44
NVD	CVE-2010-2094	27 May 201022:30	–	nvd
NVD	CVE-2010-2950	28 Sep 201018:00	–	nvd
Exploit DB	PHP 5.3.x < 5.3.2 - 'ext/phar/stream.c' / 'ext/phar/dirstream.c' Multiple Format String Vulnerabilities	14 May 201000:00	–	exploitdb
Tenable Nessus	FreeBSD : pecl-phar -- format string vulnerability (da3d381b-0ee6-11e0-becc-0022156e8794)	14 Oct 201100:00	–	nessus
Tenable Nessus	Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : php5 vulnerabilities (USN-989-1)	21 Sep 201000:00	–	nessus
Tenable Nessus	PHP 5.3 < 5.3.4 Multiple Vulnerabilities	10 Dec 201000:00	–	nessus
Tenable Nessus	PHP 5.3.x < 5.3.4 Multiple Vulnerabilities	10 Dec 201000:00	–	nessus
Tenable Nessus	PHP 5.3 < 5.3.4 Multiple Vulnerabilities	13 Dec 201000:00	–	nessus
Tenable Nessus	SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 7110)	11 Oct 201000:00	–	nessus
Tenable Nessus	openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2010:0678-1)	6 Oct 201000:00	–	nessus

Source	Link
php-security	www.php-security.org/2010/05/14/mops-2010-024-php-phar_stream_flush-format-string-vulnerability/index.html
php-security	www.php-security.org/2010/05/14/mops-2010-025-php-phar_wrapper_open_dir-format-string-vulnerability/index.html
php-security	www.php-security.org/2010/05/14/mops-2010-026-php-phar_wrapper_unlink-format-string-vulnerability/index.html
php-security	www.php-security.org/2010/05/14/mops-2010-027-php-phar_parse_url-format-string-vulnerabilities/index.html
php-security	www.php-security.org/2010/05/14/mops-2010-028-php-phar_wrapper_open_url-format-string-vulnerabilities/index.html
ubuntu	www.ubuntu.com/security/notices/USN-989-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2010-2094
launchpad	www.launchpad.net/bugs/cve/CVE-2010-2094
security-tracker	www.security-tracker.debian.org/tracker/CVE-2010-2094

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	10.04	noarch	php5	5.3.2-1ubuntu4.5	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 May 2010 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS26.8

EPSS0.012