logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2010-3436

Description

fopen_wrappers.c in PHP 5.3.x through 5.3.3 might allow remote attackers to bypass open_basedir restrictions via vectors related to the length of a filename. #### Bugs * <http://bugs.php.net/bug.php?id=53352> * <https://bugs.launchpad.net/ubuntu/+source/php5/+bug/701765> * <http://bugs.php.net/bug.php?id=53597> #### Notes Author| Note ---|--- [mdeslaur](<https://launchpad.net/~mdeslaur>) | open_basedir bypass, this is low [sbeattie](<https://launchpad.net/~sbeattie>) | upstream patch introduced the regression in LP: #701765 a second regression http://bugs.php.net/bug.php?id=53597, is actually an intended upstream behavior change.


Affected Package


OS OS Version Package Name Package Version
ubuntu 06.06 php5 5.1.2-1ubuntu3.20
ubuntu 08.04 php5 5.2.4-2ubuntu5.13
ubuntu 09.10 php5 5.2.10.dfsg.1-2ubuntu6.6
ubuntu 10.04 php5 5.3.2-1ubuntu4.6
ubuntu 10.10 php5 5.3.3-1ubuntu9.2

Related