Lucene search
Ubuntu.comUB:CVE-2012-0057HistoryFeb 01, 2012 - 12:00 a.m.
CVE-2012-0057
2012-02-0100:00:00
ubuntu.com
ubuntu.com
8
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.007 Low
EPSS
Percentile
79.8%
PHP before 5.3.9 has improper libxslt security settings, which allows
remote attackers to create arbitrary files via a crafted XSLT stylesheet
that uses the libxslt output extension.
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=656308>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658087>
Notes
| Author | Note |
|---|---|
| jdstrand | watch out for Debian regression (658087) for DSA-2399-1 in php5-xsl |
Related
seebug
seebug
PHP 5.3.x libxslt安全限制绕过漏洞
2012-02-04 00:00:00
php: XSLT file writing vulnerability(CVE-2012-0057)
2012-02-03 00:00:00
prion
prion
Code injection
2012-02-02 00:55:00
cve
cve
CVE-2012-0057
2012-02-02 00:55:00
openvas
openvas
PHP Security Bypass Vulnerability
2012-04-12 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:0472-1)
2021-06-09 00:00:00
Debian Security Advisory DSA 2399-2 (php5)
2012-02-12 00:00:00
nessus
nessus
SuSE 11.2 Security Update : PHP5 (SAT Patch Number 5958)
2012-04-06 00:00:00
PHP < 5.3.9 Multiple Vulnerabilities
2012-01-16 00:00:00
PHP < 5.3.9 Multiple Vulnerabilities
2012-01-16 00:00:00
suse
suse
Security update for PHP5 (important)
2012-04-06 03:08:16
Security update for PHP5 (important)
2012-03-24 03:08:28
update for php5 (important)
2012-03-29 15:08:14
oraclelinux
oraclelinux
php security update
2012-06-27 00:00:00
php53 security update
2012-06-27 00:00:00
php security update
2012-06-29 00:00:00
freebsd
freebsd
databases/postgresql*-server -- multiple vulnerabilities
2012-08-17 00:00:00
osv
osv
php5 - several
2012-01-31 00:00:00
debian
debian
[SECURITY] [DSA 2399-1] php5 security update
2012-01-31 07:22:58
[SECURITY] [DSA 2399-2] php5 regression fix
2012-01-31 15:26:47
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:42:12
Denial Of Service (DoS) Or Directory Traversal
2019-05-02 04:42:12
Arbitrary Code Execution
2019-05-02 04:42:12
redhat
redhat
(RHSA-2012:1045) Moderate: php security update
2012-06-27 00:00:00
(RHSA-2012:1047) Moderate: php53 security update
2012-06-27 00:00:00
(RHSA-2012:1046) Moderate: php security update
2012-06-27 00:00:00
centos
centos
php security update
2012-06-27 20:21:47
php53 security update
2012-06-27 20:24:26
php security update
2012-07-10 17:36:22
ubuntu
ubuntu
PHP vulnerabilities
2012-02-10 00:00:00
PHP regression
2012-02-13 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2012-09-24 00:00:00
f5
f5
Multiple PHP vulnerabilities
2012-04-05 02:07:00
SOL13518 - Multiple PHP vulnerabilities
2012-04-04 00:00:00
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.007 Low
EPSS
Percentile
79.8%
Related for UB:CVE-2012-0057