Vulnerability-Lookup

RHSA-2011_1423

Vulnerability from csaf_redhat - Published: 2011-11-02 22:15 - Updated: 2024-11-22 04:55

Summary

Red Hat Security Advisory: php53 and php security update

Severity

Moderate

Notes

Topic: Updated php53 and php packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 respectively. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Details: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A signedness issue was found in the way the PHP crypt() function handled 8-bit characters in passwords when using Blowfish hashing. Up to three characters immediately preceding a non-ASCII character (one with the high bit set) had no effect on the hash result, thus shortening the effective password length. This made brute-force guessing more efficient as several different passwords were hashed to the same value. (CVE-2011-2483) Note: Due to the CVE-2011-2483 fix, after installing this update some users may not be able to log in to PHP applications that hash passwords with Blowfish using the PHP crypt() function. Refer to the upstream "CRYPT_BLOWFISH security fix details" document, linked to in the References, for details. An insufficient input validation flaw, leading to a buffer over-read, was found in the PHP exif extension. A specially-crafted image file could cause the PHP interpreter to crash when a PHP script tries to extract Exchangeable image file format (Exif) metadata from the image file. (CVE-2011-0708) An integer overflow flaw was found in the PHP calendar extension. A remote attacker able to make a PHP script call SdnToJulian() with a large value could cause the PHP interpreter to crash. (CVE-2011-1466) Multiple memory leak flaws were found in the PHP OpenSSL extension. A remote attacker able to make a PHP script use openssl_encrypt() or openssl_decrypt() repeatedly could cause the PHP interpreter to use an excessive amount of memory. (CVE-2011-1468) A use-after-free flaw was found in the PHP substr_replace() function. If a PHP script used the same variable as multiple function arguments, a remote attacker could possibly use this to crash the PHP interpreter or, possibly, execute arbitrary code. (CVE-2011-1148) A bug in the PHP Streams component caused the PHP interpreter to crash if an FTP wrapper connection was made through an HTTP proxy. A remote attacker could possibly trigger this issue if a PHP script accepted an untrusted URL to connect to. (CVE-2011-1469) An integer signedness issue was found in the PHP zip extension. An attacker could use a specially-crafted ZIP archive to cause the PHP interpreter to use an excessive amount of CPU time until the script execution time limit is reached. (CVE-2011-1471) A stack-based buffer overflow flaw was found in the way the PHP socket extension handled long AF_UNIX socket addresses. An attacker able to make a PHP script connect to a long AF_UNIX socket address could use this flaw to crash the PHP interpreter. (CVE-2011-1938) An off-by-one flaw was found in PHP. If an attacker uploaded a file with a specially-crafted file name it could cause a PHP script to attempt to write a file to the root (/) directory. By default, PHP runs as the "apache" user, preventing it from writing to the root directory. (CVE-2011-2202) All php53 and php users should upgrade to these updated packages, which contain backported patches to resolve these issues. After installing the updated packages, the httpd daemon must be restarted for the update to take effect.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2011-0708

exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.

2.6 ()


                
                  AV:N/AC:H/Au:N/C:N/I:N/A:P

Affected products

Fixed 440 products

Product	Version	Remediation
Unresolved product id: 5Client-Workstation-5.7.Z:php53-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-0:5.3.3-1.el5_7.3.src	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-bcmath-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-bcmath-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-bcmath-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-bcmath-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-bcmath-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-cli-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-cli-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-cli-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-cli-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-cli-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-common-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-common-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-common-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-common-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-common-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-dba-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-dba-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-dba-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-dba-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-dba-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-debuginfo-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-debuginfo-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-debuginfo-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-debuginfo-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-debuginfo-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-devel-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-devel-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-devel-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-devel-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-devel-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-gd-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-gd-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-gd-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-gd-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-gd-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-imap-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-imap-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-imap-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-imap-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-imap-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-intl-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-intl-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-intl-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-intl-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-intl-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-ldap-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-ldap-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-ldap-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-ldap-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-ldap-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-mbstring-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-mbstring-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-mbstring-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-mbstring-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-mbstring-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-mysql-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-mysql-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-mysql-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-mysql-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-mysql-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-odbc-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-odbc-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-odbc-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-odbc-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-odbc-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-pdo-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-pdo-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-pdo-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-pdo-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-pdo-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-pgsql-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-pgsql-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-pgsql-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-pgsql-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-pgsql-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-process-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-process-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-process-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-process-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-process-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-pspell-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-pspell-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-pspell-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-pspell-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-pspell-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-snmp-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-snmp-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-snmp-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-snmp-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-snmp-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-soap-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-soap-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-soap-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-soap-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-soap-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-xml-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-xml-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-xml-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-xml-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-xml-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-xmlrpc-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-xmlrpc-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-xmlrpc-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-xmlrpc-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Client-Workstation-5.7.Z:php53-xmlrpc-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-0:5.3.3-1.el5_7.3.src	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-bcmath-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-bcmath-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-bcmath-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-bcmath-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-bcmath-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-cli-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-cli-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-cli-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-cli-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-cli-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-common-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-common-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-common-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-common-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-common-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-dba-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-dba-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-dba-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-dba-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-dba-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-debuginfo-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-debuginfo-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-debuginfo-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-debuginfo-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-debuginfo-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-devel-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-devel-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-devel-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-devel-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-devel-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-gd-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-gd-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-gd-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-gd-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-gd-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-imap-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-imap-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-imap-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-imap-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-imap-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-intl-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-intl-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-intl-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-intl-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-intl-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-ldap-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-ldap-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-ldap-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-ldap-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-ldap-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-mbstring-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-mbstring-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-mbstring-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-mbstring-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-mbstring-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-mysql-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-mysql-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-mysql-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-mysql-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-mysql-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-odbc-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-odbc-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-odbc-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-odbc-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-odbc-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-pdo-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-pdo-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-pdo-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-pdo-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-pdo-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-pgsql-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-pgsql-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-pgsql-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-pgsql-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-pgsql-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-process-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-process-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-process-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-process-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-process-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-pspell-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-pspell-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-pspell-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-pspell-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-pspell-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-snmp-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-snmp-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-snmp-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-snmp-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-snmp-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-soap-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-soap-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-soap-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-soap-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-soap-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-xml-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-xml-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-xml-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-xml-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-xml-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-xmlrpc-0:5.3.3-1.el5_7.3.i386	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-xmlrpc-0:5.3.3-1.el5_7.3.ia64	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-xmlrpc-0:5.3.3-1.el5_7.3.ppc	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-xmlrpc-0:5.3.3-1.el5_7.3.s390x	—	Vendor Fix fix
Unresolved product id: 5Server-5.7.Z:php53-xmlrpc-0:5.3.3-1.el5_7.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-0:5.3.3-3.el6_1.3.src	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-bcmath-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-bcmath-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-bcmath-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-bcmath-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-cli-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-cli-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-cli-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-cli-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-common-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-common-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-common-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-common-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-dba-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-dba-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-dba-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-dba-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-debuginfo-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-debuginfo-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-debuginfo-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-debuginfo-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-devel-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-devel-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-devel-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-devel-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-embedded-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-embedded-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-embedded-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-embedded-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-enchant-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-enchant-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-enchant-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-enchant-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-gd-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-gd-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-gd-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-gd-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-imap-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-imap-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-imap-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-imap-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-intl-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-intl-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-intl-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-intl-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-ldap-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-ldap-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-ldap-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-ldap-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-mbstring-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-mbstring-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-mbstring-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-mbstring-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-mysql-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-mysql-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-mysql-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-mysql-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-odbc-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-odbc-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-odbc-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-odbc-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-pdo-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-pdo-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-pdo-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-pdo-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-pgsql-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-pgsql-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-pgsql-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-pgsql-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-process-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-process-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-process-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-process-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-pspell-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-pspell-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-pspell-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-pspell-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-recode-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-recode-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-recode-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-recode-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-snmp-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-snmp-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-snmp-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-snmp-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-soap-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-soap-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-soap-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-soap-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-tidy-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-tidy-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-tidy-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-tidy-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-xml-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-xml-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-xml-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-xml-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-xmlrpc-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-xmlrpc-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-xmlrpc-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-xmlrpc-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-zts-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-zts-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-zts-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-6.1.z:php-zts-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-0:5.3.3-3.el6_1.3.src	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-bcmath-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-bcmath-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-bcmath-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-bcmath-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-cli-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-cli-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-cli-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-cli-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-common-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-common-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-common-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-common-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-dba-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-dba-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-dba-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-dba-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-debuginfo-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-debuginfo-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-debuginfo-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-debuginfo-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-devel-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-devel-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-devel-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-devel-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-embedded-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-embedded-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-embedded-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-embedded-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-enchant-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-enchant-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-enchant-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-enchant-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-gd-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-gd-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-gd-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-gd-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-imap-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-imap-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-imap-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-imap-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-intl-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-intl-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-intl-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-intl-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-ldap-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-ldap-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-ldap-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-ldap-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-mbstring-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-mbstring-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-mbstring-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-mbstring-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-mysql-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-mysql-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-mysql-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-mysql-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-odbc-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-odbc-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-odbc-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-odbc-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-pdo-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-pdo-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-pdo-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-pdo-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-pgsql-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-pgsql-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-pgsql-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-pgsql-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-process-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-process-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-process-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-process-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-pspell-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-pspell-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-pspell-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-pspell-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-recode-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-recode-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-recode-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-recode-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-snmp-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-snmp-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-snmp-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-snmp-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-soap-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-soap-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-soap-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-soap-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-tidy-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-tidy-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-tidy-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-tidy-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-xml-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-xml-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-xml-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-xml-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-xmlrpc-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-xmlrpc-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-xmlrpc-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-xmlrpc-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-zts-0:5.3.3-3.el6_1.3.i686	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-zts-0:5.3.3-3.el6_1.3.ppc64	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-zts-0:5.3.3-3.el6_1.3.s390x	—	Vendor Fix fix
Unresolved product id: 6Server-optional-6.1.z:php-zts-0:5.3.3-3.el6_1.3.x86_64	—	Vendor Fix fix

Threats

Impact Low

CVE-2011-1148

Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by using the same variable for multiple arguments.

6.8 ()


                
                  AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-416 - Use After Free

Affected products

Fixed 440 products, the same list as for CVE-2011-0708

Threats

Impact Moderate

CVE-2011-1466

Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

Fixed 440 products, the same list as for CVE-2011-0708

Threats

Impact Low

CVE-2011-1468

Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-401 - Missing Release of Memory after Effective Lifetime

Affected products

Fixed 440 products, the same list as for CVE-2011-0708

Threats

Impact Low

CVE-2011-1469

Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

Fixed 440 products, the same list as for CVE-2011-0708

Threats

Impact Low

CVE-2011-1471

Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

Fixed 440 products, the same list as for CVE-2011-0708

Threats

Impact Low

CVE-2011-1938

Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.

2.6 ()


                
                  AV:N/AC:H/Au:N/C:N/I:N/A:P

CWE-121 - Stack-based Buffer Overflow

Affected products

Fixed 440 products, the same list as for CVE-2011-0708

Threats

Impact Low

CVE-2011-2202

The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request, related to a "file path injection vulnerability."

2.6 ()


                
                  AV:N/AC:H/Au:N/C:N/I:P/A:N

Affected products

Fixed 440 products, the same list as for CVE-2011-0708

Threats

Impact Low

CVE-2011-2483

crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash.

4.3 ()


                
                  AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

Fixed 440 products, the same list as for CVE-2011-0708

Threats

Impact Moderate

References

50 references

URL	Category
https://access.redhat.com/errata/RHSA-2011:1423	self
https://access.redhat.com/security/updates/classi…	external
http://www.php.net/security/crypt_blowfish.php	external
https://bugzilla.redhat.com/show_bug.cgi?id=680972	external
https://bugzilla.redhat.com/show_bug.cgi?id=688958	external
https://bugzilla.redhat.com/show_bug.cgi?id=689386	external
https://bugzilla.redhat.com/show_bug.cgi?id=690899	external
https://bugzilla.redhat.com/show_bug.cgi?id=690905	external
https://bugzilla.redhat.com/show_bug.cgi?id=690915	external
https://bugzilla.redhat.com/show_bug.cgi?id=709067	external
https://bugzilla.redhat.com/show_bug.cgi?id=713194	external
https://bugzilla.redhat.com/show_bug.cgi?id=715025	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2011-0708	self
https://bugzilla.redhat.com/show_bug.cgi?id=680972	external
https://www.cve.org/CVERecord?id=CVE-2011-0708	external
https://nvd.nist.gov/vuln/detail/CVE-2011-0708	external
https://access.redhat.com/security/cve/CVE-2011-1148	self
https://bugzilla.redhat.com/show_bug.cgi?id=688958	external
https://www.cve.org/CVERecord?id=CVE-2011-1148	external
https://nvd.nist.gov/vuln/detail/CVE-2011-1148	external
https://access.redhat.com/security/cve/CVE-2011-1466	self
https://bugzilla.redhat.com/show_bug.cgi?id=689386	external
https://www.cve.org/CVERecord?id=CVE-2011-1466	external
https://nvd.nist.gov/vuln/detail/CVE-2011-1466	external
https://access.redhat.com/security/cve/CVE-2011-1468	self
https://bugzilla.redhat.com/show_bug.cgi?id=690899	external
https://www.cve.org/CVERecord?id=CVE-2011-1468	external
https://nvd.nist.gov/vuln/detail/CVE-2011-1468	external
https://access.redhat.com/security/cve/CVE-2011-1469	self
https://bugzilla.redhat.com/show_bug.cgi?id=690905	external
https://www.cve.org/CVERecord?id=CVE-2011-1469	external
https://nvd.nist.gov/vuln/detail/CVE-2011-1469	external
https://access.redhat.com/security/cve/CVE-2011-1471	self
https://bugzilla.redhat.com/show_bug.cgi?id=690915	external
https://www.cve.org/CVERecord?id=CVE-2011-1471	external
https://nvd.nist.gov/vuln/detail/CVE-2011-1471	external
https://access.redhat.com/security/cve/CVE-2011-1938	self
https://bugzilla.redhat.com/show_bug.cgi?id=709067	external
https://www.cve.org/CVERecord?id=CVE-2011-1938	external
https://nvd.nist.gov/vuln/detail/CVE-2011-1938	external
https://access.redhat.com/security/cve/CVE-2011-2202	self
https://bugzilla.redhat.com/show_bug.cgi?id=713194	external
https://www.cve.org/CVERecord?id=CVE-2011-2202	external
https://nvd.nist.gov/vuln/detail/CVE-2011-2202	external
https://access.redhat.com/security/cve/CVE-2011-2483	self
https://bugzilla.redhat.com/show_bug.cgi?id=715025	external
https://www.cve.org/CVERecord?id=CVE-2011-2483	external
https://nvd.nist.gov/vuln/detail/CVE-2011-2483	external
http://www.php.net/security/crypt_blowfish.php	external

JSON

To clipboard

Loading 1.1 MB of JSON…

CVE-2011-0708 (GCVE-0-2011-0708)

Vulnerability from cvelistv5 – Published: 2011-03-20 01:00 – Updated: 2024-08-06 21:58

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1111 records in the last 180 days details

References

25 references

URL	Tags
http://marc.info/?l=bugtraq&m=133469208622507&w=2	vendor-advisoryx_refsource_HP
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://www.vupen.com/english/advisories/2011/0764	vdb-entryx_refsource_VUPEN
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://www.exploit-db.com/exploits/16261/	exploitx_refsource_EXPLOIT-DB
https://bugzilla.redhat.com/show_bug.cgi?id=680972	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.debian.org/security/2011/dsa-2266	vendor-advisoryx_refsource_DEBIAN
http://www.vupen.com/english/advisories/2011/0890	vdb-entryx_refsource_VUPEN
http://www.php.net/releases/5_3_6.php	x_refsource_CONFIRM
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://www.php.net/archive/2011.php	x_refsource_CONFIRM
http://lists.apple.com/archives/Security-announce…	vendor-advisoryx_refsource_APPLE
http://bugs.php.net/bug.php?id=54002	x_refsource_CONFIRM
http://openwall.com/lists/oss-security/2011/02/16/7	mailing-listx_refsource_MLIST
http://www.redhat.com/support/errata/RHSA-2011-14…	vendor-advisoryx_refsource_REDHAT
http://openwall.com/lists/oss-security/2011/02/14/1	mailing-listx_refsource_MLIST
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://securityreason.com/securityalert/8114	third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/bid/46365	vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2011/0744	vdb-entryx_refsource_VUPEN
http://rhn.redhat.com/errata/RHSA-2012-0071.html	vendor-advisoryx_refsource_REDHAT
http://support.apple.com/kb/HT5002	x_refsource_CONFIRM
http://svn.php.net/viewvc?view=revision&revision=308316	x_refsource_CONFIRM

Date Public

2011-02-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T21:58:26.128Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "HPSBOV02763",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
          },
          {
            "name": "FEDORA-2011-3636",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057709.html"
          },
          {
            "name": "ADV-2011-0764",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0764"
          },
          {
            "name": "FEDORA-2011-3614",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056642.html"
          },
          {
            "name": "16261",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "http://www.exploit-db.com/exploits/16261/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=680972"
          },
          {
            "name": "MDVSA-2011:053",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:053"
          },
          {
            "name": "DSA-2266",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2011/dsa-2266"
          },
          {
            "name": "ADV-2011-0890",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0890"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/releases/5_3_6.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/archive/2011.php"
          },
          {
            "name": "SSRT100826",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
          },
          {
            "name": "APPLE-SA-2011-10-12-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.php.net/bug.php?id=54002"
          },
          {
            "name": "[oss-security] 20110216 Re: Re: PHP Exif 64bit Casting Vulnerability, CVE request",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/02/16/7"
          },
          {
            "name": "RHSA-2011:1423",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
          },
          {
            "name": "[oss-security] 20110214 PHP Exif 64bit Casting Vulnerability, CVE request",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/02/14/1"
          },
          {
            "name": "FEDORA-2011-3666",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057710.html"
          },
          {
            "name": "MDVSA-2011:052",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:052"
          },
          {
            "name": "8114",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8114"
          },
          {
            "name": "46365",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/46365"
          },
          {
            "name": "ADV-2011-0744",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0744"
          },
          {
            "name": "RHSA-2012:0071",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0071.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT5002"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.php.net/viewvc?view=revision\u0026revision=308316"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-02-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-08-19T15:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "HPSBOV02763",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
        },
        {
          "name": "FEDORA-2011-3636",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057709.html"
        },
        {
          "name": "ADV-2011-0764",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0764"
        },
        {
          "name": "FEDORA-2011-3614",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056642.html"
        },
        {
          "name": "16261",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "http://www.exploit-db.com/exploits/16261/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=680972"
        },
        {
          "name": "MDVSA-2011:053",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:053"
        },
        {
          "name": "DSA-2266",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2011/dsa-2266"
        },
        {
          "name": "ADV-2011-0890",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0890"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/releases/5_3_6.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/archive/2011.php"
        },
        {
          "name": "SSRT100826",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
        },
        {
          "name": "APPLE-SA-2011-10-12-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.php.net/bug.php?id=54002"
        },
        {
          "name": "[oss-security] 20110216 Re: Re: PHP Exif 64bit Casting Vulnerability, CVE request",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/02/16/7"
        },
        {
          "name": "RHSA-2011:1423",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
        },
        {
          "name": "[oss-security] 20110214 PHP Exif 64bit Casting Vulnerability, CVE request",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/02/14/1"
        },
        {
          "name": "FEDORA-2011-3666",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057710.html"
        },
        {
          "name": "MDVSA-2011:052",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:052"
        },
        {
          "name": "8114",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8114"
        },
        {
          "name": "46365",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/46365"
        },
        {
          "name": "ADV-2011-0744",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0744"
        },
        {
          "name": "RHSA-2012:0071",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0071.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT5002"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.php.net/viewvc?view=revision\u0026revision=308316"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-0708",
    "datePublished": "2011-03-20T01:00:00.000Z",
    "dateReserved": "2011-01-31T00:00:00.000Z",
    "dateUpdated": "2024-08-06T21:58:26.128Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2011-1148 (GCVE-0-2011-1148)

Vulnerability from cvelistv5 – Published: 2011-03-18 15:00 – Updated: 2024-08-06 22:14

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1111 records in the last 180 days details

References

14 references

URL	Tags
http://marc.info/?l=bugtraq&m=133469208622507&w=2	vendor-advisoryx_refsource_HP
http://support.apple.com/kb/HT5130	x_refsource_CONFIRM
http://www.securityfocus.com/bid/49241	vdb-entryx_refsource_BID
http://openwall.com/lists/oss-security/2011/03/13/2	mailing-listx_refsource_MLIST
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://openwall.com/lists/oss-security/2011/03/13/9	mailing-listx_refsource_MLIST
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://openwall.com/lists/oss-security/2011/03/13/3	mailing-listx_refsource_MLIST
http://bugs.php.net/bug.php?id=54238	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2011-14…	vendor-advisoryx_refsource_REDHAT
http://www.php.net/ChangeLog-5.php#5.3.7	x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/46843	vdb-entryx_refsource_BID
http://www.php.net/archive/2011.php#id2011-08-18-1	x_refsource_CONFIRM

Date Public

2011-03-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:14:27.813Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "HPSBOV02763",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT5130"
          },
          {
            "name": "49241",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/49241"
          },
          {
            "name": "[oss-security] 20110313 CVE request: PHP substr_replace() use-after-free",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/13/2"
          },
          {
            "name": "MDVSA-2011:165",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:165"
          },
          {
            "name": "[oss-security] 20110313 Re: CVE request: PHP substr_replace() use-after-free",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/13/9"
          },
          {
            "name": "APPLE-SA-2012-02-01-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html"
          },
          {
            "name": "[oss-security] 20110313 Re: CVE request: PHP substr_replace() use-after-free",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/03/13/3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.php.net/bug.php?id=54238"
          },
          {
            "name": "SSRT100826",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
          },
          {
            "name": "RHSA-2011:1423",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php#5.3.7"
          },
          {
            "name": "php-substrreplace-code-exec(66080)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66080"
          },
          {
            "name": "46843",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/46843"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/archive/2011.php#id2011-08-18-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-03-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by using the same variable for multiple arguments."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "HPSBOV02763",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT5130"
        },
        {
          "name": "49241",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/49241"
        },
        {
          "name": "[oss-security] 20110313 CVE request: PHP substr_replace() use-after-free",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/13/2"
        },
        {
          "name": "MDVSA-2011:165",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:165"
        },
        {
          "name": "[oss-security] 20110313 Re: CVE request: PHP substr_replace() use-after-free",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/13/9"
        },
        {
          "name": "APPLE-SA-2012-02-01-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html"
        },
        {
          "name": "[oss-security] 20110313 Re: CVE request: PHP substr_replace() use-after-free",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/03/13/3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.php.net/bug.php?id=54238"
        },
        {
          "name": "SSRT100826",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
        },
        {
          "name": "RHSA-2011:1423",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php#5.3.7"
        },
        {
          "name": "php-substrreplace-code-exec(66080)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66080"
        },
        {
          "name": "46843",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/46843"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/archive/2011.php#id2011-08-18-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2011-1148",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by using the same variable for multiple arguments."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "HPSBOV02763",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
            },
            {
              "name": "http://support.apple.com/kb/HT5130",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT5130"
            },
            {
              "name": "49241",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/49241"
            },
            {
              "name": "[oss-security] 20110313 CVE request: PHP substr_replace() use-after-free",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2011/03/13/2"
            },
            {
              "name": "MDVSA-2011:165",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:165"
            },
            {
              "name": "[oss-security] 20110313 Re: CVE request: PHP substr_replace() use-after-free",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2011/03/13/9"
            },
            {
              "name": "APPLE-SA-2012-02-01-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html"
            },
            {
              "name": "[oss-security] 20110313 Re: CVE request: PHP substr_replace() use-after-free",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2011/03/13/3"
            },
            {
              "name": "http://bugs.php.net/bug.php?id=54238",
              "refsource": "CONFIRM",
              "url": "http://bugs.php.net/bug.php?id=54238"
            },
            {
              "name": "SSRT100826",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
            },
            {
              "name": "RHSA-2011:1423",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php#5.3.7",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php#5.3.7"
            },
            {
              "name": "php-substrreplace-code-exec(66080)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/66080"
            },
            {
              "name": "46843",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/46843"
            },
            {
              "name": "http://www.php.net/archive/2011.php#id2011-08-18-1",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/archive/2011.php#id2011-08-18-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-1148",
    "datePublished": "2011-03-18T15:00:00.000Z",
    "dateReserved": "2011-03-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T22:14:27.813Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2011-1466 (GCVE-0-2011-1466)

Vulnerability from cvelistv5 – Published: 2011-03-20 01:00 – Updated: 2024-08-06 22:28

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2262 records in the last 180 days details

References

13 references

URL	Tags
http://bugs.php.net/bug.php?id=53574	x_refsource_CONFIRM
http://www.securityfocus.com/bid/46967	vdb-entryx_refsource_BID
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.debian.org/security/2011/dsa-2266	vendor-advisoryx_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://lists.apple.com/archives/Security-announce…	vendor-advisoryx_refsource_APPLE
http://secunia.com/advisories/48668	third-party-advisoryx_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2011-14…	vendor-advisoryx_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.vupen.com/english/advisories/2011/0744	vdb-entryx_refsource_VUPEN
http://rhn.redhat.com/errata/RHSA-2012-0071.html	vendor-advisoryx_refsource_REDHAT
http://support.apple.com/kb/HT5002	x_refsource_CONFIRM

Date Public

2011-03-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:28:41.750Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.php.net/bug.php?id=53574"
          },
          {
            "name": "46967",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/46967"
          },
          {
            "name": "MDVSA-2011:053",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:053"
          },
          {
            "name": "DSA-2266",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2011/dsa-2266"
          },
          {
            "name": "openSUSE-SU-2012:0426",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "APPLE-SA-2011-10-12-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
          },
          {
            "name": "48668",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/48668"
          },
          {
            "name": "RHSA-2011:1423",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
          },
          {
            "name": "MDVSA-2011:052",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:052"
          },
          {
            "name": "ADV-2011-0744",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0744"
          },
          {
            "name": "RHSA-2012:0071",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0071.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT5002"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-03-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2011-04-09T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.php.net/bug.php?id=53574"
        },
        {
          "name": "46967",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/46967"
        },
        {
          "name": "MDVSA-2011:053",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:053"
        },
        {
          "name": "DSA-2266",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2011/dsa-2266"
        },
        {
          "name": "openSUSE-SU-2012:0426",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "APPLE-SA-2011-10-12-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
        },
        {
          "name": "48668",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/48668"
        },
        {
          "name": "RHSA-2011:1423",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
        },
        {
          "name": "MDVSA-2011:052",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:052"
        },
        {
          "name": "ADV-2011-0744",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0744"
        },
        {
          "name": "RHSA-2012:0071",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0071.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT5002"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2011-1466",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://bugs.php.net/bug.php?id=53574",
              "refsource": "CONFIRM",
              "url": "http://bugs.php.net/bug.php?id=53574"
            },
            {
              "name": "46967",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/46967"
            },
            {
              "name": "MDVSA-2011:053",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:053"
            },
            {
              "name": "DSA-2266",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2011/dsa-2266"
            },
            {
              "name": "openSUSE-SU-2012:0426",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php"
            },
            {
              "name": "APPLE-SA-2011-10-12-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
            },
            {
              "name": "48668",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/48668"
            },
            {
              "name": "RHSA-2011:1423",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
            },
            {
              "name": "MDVSA-2011:052",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:052"
            },
            {
              "name": "ADV-2011-0744",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2011/0744"
            },
            {
              "name": "RHSA-2012:0071",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0071.html"
            },
            {
              "name": "http://support.apple.com/kb/HT5002",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT5002"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2011-1466",
    "datePublished": "2011-03-20T01:00:00.000Z",
    "dateReserved": "2011-03-19T00:00:00.000Z",
    "dateUpdated": "2024-08-06T22:28:41.750Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2011-1468 (GCVE-0-2011-1468)

Vulnerability from cvelistv5 – Published: 2011-03-20 01:00 – Updated: 2024-08-06 22:28

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2262 records in the last 180 days details

References

9 references

URL	Tags
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://lists.apple.com/archives/Security-announce…	vendor-advisoryx_refsource_APPLE
http://bugs.php.net/bug.php?id=54060	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2011-14…	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/46977	vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2011/0744	vdb-entryx_refsource_VUPEN
http://support.apple.com/kb/HT5002	x_refsource_CONFIRM
http://bugs.php.net/bug.php?id=54061	x_refsource_CONFIRM

Date Public

2011-03-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:28:41.435Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "MDVSA-2011:053",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:053"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "APPLE-SA-2011-10-12-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.php.net/bug.php?id=54060"
          },
          {
            "name": "RHSA-2011:1423",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
          },
          {
            "name": "46977",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/46977"
          },
          {
            "name": "ADV-2011-0744",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0744"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT5002"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.php.net/bug.php?id=54061"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-03-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2011-04-09T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "MDVSA-2011:053",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:053"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "APPLE-SA-2011-10-12-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.php.net/bug.php?id=54060"
        },
        {
          "name": "RHSA-2011:1423",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
        },
        {
          "name": "46977",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/46977"
        },
        {
          "name": "ADV-2011-0744",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0744"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT5002"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.php.net/bug.php?id=54061"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2011-1468",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "MDVSA-2011:053",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:053"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php"
            },
            {
              "name": "APPLE-SA-2011-10-12-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
            },
            {
              "name": "http://bugs.php.net/bug.php?id=54060",
              "refsource": "CONFIRM",
              "url": "http://bugs.php.net/bug.php?id=54060"
            },
            {
              "name": "RHSA-2011:1423",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
            },
            {
              "name": "46977",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/46977"
            },
            {
              "name": "ADV-2011-0744",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2011/0744"
            },
            {
              "name": "http://support.apple.com/kb/HT5002",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT5002"
            },
            {
              "name": "http://bugs.php.net/bug.php?id=54061",
              "refsource": "CONFIRM",
              "url": "http://bugs.php.net/bug.php?id=54061"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2011-1468",
    "datePublished": "2011-03-20T01:00:00.000Z",
    "dateReserved": "2011-03-19T00:00:00.000Z",
    "dateUpdated": "2024-08-06T22:28:41.435Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2011-1469 (GCVE-0-2011-1469)

Vulnerability from cvelistv5 – Published: 2011-03-20 01:00 – Updated: 2024-08-06 22:28

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2262 records in the last 180 days details

References

9 references

URL	Tags
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://lists.apple.com/archives/Security-announce…	vendor-advisoryx_refsource_APPLE
http://www.securityfocus.com/bid/46970	vdb-entryx_refsource_BID
http://www.redhat.com/support/errata/RHSA-2011-14…	vendor-advisoryx_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.vupen.com/english/advisories/2011/0744	vdb-entryx_refsource_VUPEN
http://bugs.php.net/bug.php?id=54092	x_refsource_CONFIRM
http://support.apple.com/kb/HT5002	x_refsource_CONFIRM

Date Public

2011-03-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:28:41.600Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "MDVSA-2011:053",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:053"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "APPLE-SA-2011-10-12-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
          },
          {
            "name": "46970",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/46970"
          },
          {
            "name": "RHSA-2011:1423",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
          },
          {
            "name": "MDVSA-2011:052",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:052"
          },
          {
            "name": "ADV-2011-0744",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0744"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.php.net/bug.php?id=54092"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT5002"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-03-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2011-04-09T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "MDVSA-2011:053",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:053"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "APPLE-SA-2011-10-12-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
        },
        {
          "name": "46970",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/46970"
        },
        {
          "name": "RHSA-2011:1423",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
        },
        {
          "name": "MDVSA-2011:052",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:052"
        },
        {
          "name": "ADV-2011-0744",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0744"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.php.net/bug.php?id=54092"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT5002"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2011-1469",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "MDVSA-2011:053",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:053"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php"
            },
            {
              "name": "APPLE-SA-2011-10-12-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
            },
            {
              "name": "46970",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/46970"
            },
            {
              "name": "RHSA-2011:1423",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
            },
            {
              "name": "MDVSA-2011:052",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:052"
            },
            {
              "name": "ADV-2011-0744",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2011/0744"
            },
            {
              "name": "http://bugs.php.net/bug.php?id=54092",
              "refsource": "CONFIRM",
              "url": "http://bugs.php.net/bug.php?id=54092"
            },
            {
              "name": "http://support.apple.com/kb/HT5002",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT5002"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2011-1469",
    "datePublished": "2011-03-20T01:00:00.000Z",
    "dateReserved": "2011-03-19T00:00:00.000Z",
    "dateUpdated": "2024-08-06T22:28:41.600Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2011-1471 (GCVE-0-2011-1471)

Vulnerability from cvelistv5 – Published: 2011-03-20 01:00 – Updated: 2024-08-06 22:28

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 28/100 over 2262 records in the last 180 days details

References

10 references

URL	Tags
http://www.securityfocus.com/bid/46975	vdb-entryx_refsource_BID
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.debian.org/security/2011/dsa-2266	vendor-advisoryx_refsource_DEBIAN
http://www.php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://lists.apple.com/archives/Security-announce…	vendor-advisoryx_refsource_APPLE
http://www.redhat.com/support/errata/RHSA-2011-14…	vendor-advisoryx_refsource_REDHAT
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.vupen.com/english/advisories/2011/0744	vdb-entryx_refsource_VUPEN
http://support.apple.com/kb/HT5002	x_refsource_CONFIRM
http://bugs.php.net/bug.php?id=49072	x_refsource_CONFIRM

Date Public

2011-03-17 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:28:41.433Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "46975",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/46975"
          },
          {
            "name": "MDVSA-2011:053",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:053"
          },
          {
            "name": "DSA-2266",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2011/dsa-2266"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php"
          },
          {
            "name": "APPLE-SA-2011-10-12-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
          },
          {
            "name": "RHSA-2011:1423",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
          },
          {
            "name": "MDVSA-2011:052",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:052"
          },
          {
            "name": "ADV-2011-0744",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0744"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT5002"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.php.net/bug.php?id=49072"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-03-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2011-04-09T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "46975",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/46975"
        },
        {
          "name": "MDVSA-2011:053",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:053"
        },
        {
          "name": "DSA-2266",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2011/dsa-2266"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php"
        },
        {
          "name": "APPLE-SA-2011-10-12-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
        },
        {
          "name": "RHSA-2011:1423",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
        },
        {
          "name": "MDVSA-2011:052",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:052"
        },
        {
          "name": "ADV-2011-0744",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0744"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT5002"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.php.net/bug.php?id=49072"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2011-1471",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "46975",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/46975"
            },
            {
              "name": "MDVSA-2011:053",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:053"
            },
            {
              "name": "DSA-2266",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2011/dsa-2266"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php"
            },
            {
              "name": "APPLE-SA-2011-10-12-3",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html"
            },
            {
              "name": "RHSA-2011:1423",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
            },
            {
              "name": "MDVSA-2011:052",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:052"
            },
            {
              "name": "ADV-2011-0744",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2011/0744"
            },
            {
              "name": "http://support.apple.com/kb/HT5002",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT5002"
            },
            {
              "name": "http://bugs.php.net/bug.php?id=49072",
              "refsource": "CONFIRM",
              "url": "http://bugs.php.net/bug.php?id=49072"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2011-1471",
    "datePublished": "2011-03-20T01:00:00.000Z",
    "dateReserved": "2011-03-19T00:00:00.000Z",
    "dateUpdated": "2024-08-06T22:28:41.433Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2011-1938 (GCVE-0-2011-1938)

Vulnerability from cvelistv5 – Published: 2011-05-31 20:00 – Updated: 2024-08-06 22:46

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1111 records in the last 180 days details

References

18 references

URL	Tags
http://svn.php.net/viewvc?view=revision&revision=311369	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=133469208622507&w=2	vendor-advisoryx_refsource_HP
http://support.apple.com/kb/HT5130	x_refsource_CONFIRM
http://www.securityfocus.com/bid/49241	vdb-entryx_refsource_BID
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://openwall.com/lists/oss-security/2011/05/24/9	mailing-listx_refsource_MLIST
http://www.debian.org/security/2012/dsa-2399	vendor-advisoryx_refsource_DEBIAN
http://svn.php.net/viewvc/php/php-src/trunk/ext/s…	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://osvdb.org/72644	vdb-entryx_refsource_OSVDB
http://securityreason.com/securityalert/8294	third-party-advisoryx_refsource_SREASON
http://www.exploit-db.com/exploits/17318/	exploitx_refsource_EXPLOIT-DB
http://www.redhat.com/support/errata/RHSA-2011-14…	vendor-advisoryx_refsource_REDHAT
http://www.php.net/ChangeLog-5.php#5.3.7	x_refsource_CONFIRM
http://securityreason.com/securityalert/8262	third-party-advisoryx_refsource_SREASON
http://www.php.net/archive/2011.php#id2011-08-18-1	x_refsource_CONFIRM
http://openwall.com/lists/oss-security/2011/05/24/1	mailing-listx_refsource_MLIST
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF

Date Public

2011-05-23 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:46:00.766Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.php.net/viewvc?view=revision\u0026revision=311369"
          },
          {
            "name": "HPSBOV02763",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT5130"
          },
          {
            "name": "49241",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/49241"
          },
          {
            "name": "MDVSA-2011:165",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:165"
          },
          {
            "name": "[oss-security] 20110524 Re: CVE request: PHP socket_connect() - stack buffer overflow",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/05/24/9"
          },
          {
            "name": "DSA-2399",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2399"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.php.net/viewvc/php/php-src/trunk/ext/sockets/sockets.c?r1=311369\u0026r2=311368\u0026pathrev=311369"
          },
          {
            "name": "APPLE-SA-2012-02-01-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html"
          },
          {
            "name": "72644",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/72644"
          },
          {
            "name": "SSRT100826",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
          },
          {
            "name": "8294",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8294"
          },
          {
            "name": "17318",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "http://www.exploit-db.com/exploits/17318/"
          },
          {
            "name": "RHSA-2011:1423",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php#5.3.7"
          },
          {
            "name": "8262",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8262"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/archive/2011.php#id2011-08-18-1"
          },
          {
            "name": "[oss-security] 20110523 CVE request: PHP socket_connect() - stack buffer overflow",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/05/24/1"
          },
          {
            "name": "php-socketconnect-bo(67606)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67606"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-05-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.php.net/viewvc?view=revision\u0026revision=311369"
        },
        {
          "name": "HPSBOV02763",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT5130"
        },
        {
          "name": "49241",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/49241"
        },
        {
          "name": "MDVSA-2011:165",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:165"
        },
        {
          "name": "[oss-security] 20110524 Re: CVE request: PHP socket_connect() - stack buffer overflow",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/05/24/9"
        },
        {
          "name": "DSA-2399",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2399"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.php.net/viewvc/php/php-src/trunk/ext/sockets/sockets.c?r1=311369\u0026r2=311368\u0026pathrev=311369"
        },
        {
          "name": "APPLE-SA-2012-02-01-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html"
        },
        {
          "name": "72644",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/72644"
        },
        {
          "name": "SSRT100826",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
        },
        {
          "name": "8294",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8294"
        },
        {
          "name": "17318",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "http://www.exploit-db.com/exploits/17318/"
        },
        {
          "name": "RHSA-2011:1423",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php#5.3.7"
        },
        {
          "name": "8262",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8262"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/archive/2011.php#id2011-08-18-1"
        },
        {
          "name": "[oss-security] 20110523 CVE request: PHP socket_connect() - stack buffer overflow",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/05/24/1"
        },
        {
          "name": "php-socketconnect-bo(67606)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67606"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2011-1938",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://svn.php.net/viewvc?view=revision\u0026revision=311369",
              "refsource": "CONFIRM",
              "url": "http://svn.php.net/viewvc?view=revision\u0026revision=311369"
            },
            {
              "name": "HPSBOV02763",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
            },
            {
              "name": "http://support.apple.com/kb/HT5130",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT5130"
            },
            {
              "name": "49241",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/49241"
            },
            {
              "name": "MDVSA-2011:165",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:165"
            },
            {
              "name": "[oss-security] 20110524 Re: CVE request: PHP socket_connect() - stack buffer overflow",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2011/05/24/9"
            },
            {
              "name": "DSA-2399",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2399"
            },
            {
              "name": "http://svn.php.net/viewvc/php/php-src/trunk/ext/sockets/sockets.c?r1=311369\u0026r2=311368\u0026pathrev=311369",
              "refsource": "CONFIRM",
              "url": "http://svn.php.net/viewvc/php/php-src/trunk/ext/sockets/sockets.c?r1=311369\u0026r2=311368\u0026pathrev=311369"
            },
            {
              "name": "APPLE-SA-2012-02-01-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html"
            },
            {
              "name": "72644",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/72644"
            },
            {
              "name": "SSRT100826",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
            },
            {
              "name": "8294",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/8294"
            },
            {
              "name": "17318",
              "refsource": "EXPLOIT-DB",
              "url": "http://www.exploit-db.com/exploits/17318/"
            },
            {
              "name": "RHSA-2011:1423",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php#5.3.7",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php#5.3.7"
            },
            {
              "name": "8262",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/8262"
            },
            {
              "name": "http://www.php.net/archive/2011.php#id2011-08-18-1",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/archive/2011.php#id2011-08-18-1"
            },
            {
              "name": "[oss-security] 20110523 CVE request: PHP socket_connect() - stack buffer overflow",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2011/05/24/1"
            },
            {
              "name": "php-socketconnect-bo(67606)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67606"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-1938",
    "datePublished": "2011-05-31T20:00:00.000Z",
    "dateReserved": "2011-05-09T00:00:00.000Z",
    "dateUpdated": "2024-08-06T22:46:00.766Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2011-2202 (GCVE-0-2011-2202)

Vulnerability from cvelistv5 – Published: 2011-06-16 23:00 – Updated: 2024-08-06 22:53

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1111 records in the last 180 days details

References

21 references

URL	Tags
http://www.securityfocus.com/bid/48259	vdb-entryx_refsource_BID
http://svn.php.net/viewvc/php/php-src/branches/PH…	x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=133469208622507&w=2	vendor-advisoryx_refsource_HP
http://svn.php.net/viewvc?view=revision&revision=312103	x_refsource_CONFIRM
http://support.apple.com/kb/HT5130	x_refsource_CONFIRM
http://www.securityfocus.com/bid/49241	vdb-entryx_refsource_BID
http://securitytracker.com/id?1025659	vdb-entryx_refsource_SECTRACK
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://svn.php.net/viewvc/php/php-src/branches/PH…	x_refsource_CONFIRM
http://secunia.com/advisories/44874	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2011/dsa-2266	vendor-advisoryx_refsource_DEBIAN
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://openwall.com/lists/oss-security/2011/06/13/15	mailing-listx_refsource_MLIST
http://bugs.php.net/bug.php?id=54939	x_refsource_CONFIRM
http://www.redhat.com/support/errata/RHSA-2011-14…	vendor-advisoryx_refsource_REDHAT
http://www.php.net/ChangeLog-5.php#5.3.7	x_refsource_CONFIRM
http://openwall.com/lists/oss-security/2011/06/12/5	mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2012-0071.html	vendor-advisoryx_refsource_REDHAT
http://www.php.net/archive/2011.php#id2011-08-18-1	x_refsource_CONFIRM
http://pastebin.com/1edSuSVN	x_refsource_MISC

Date Public

2011-06-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:53:17.428Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "48259",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/48259"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/main/rfc1867.c?r1=312103\u0026r2=312102\u0026pathrev=312103"
          },
          {
            "name": "HPSBOV02763",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.php.net/viewvc?view=revision\u0026revision=312103"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT5130"
          },
          {
            "name": "49241",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/49241"
          },
          {
            "name": "1025659",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1025659"
          },
          {
            "name": "php-sapiposthandlerfunc-sec-bypass(67999)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67999"
          },
          {
            "name": "MDVSA-2011:165",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:165"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/NEWS?view=markup\u0026pathrev=312103"
          },
          {
            "name": "44874",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/44874"
          },
          {
            "name": "DSA-2266",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2011/dsa-2266"
          },
          {
            "name": "APPLE-SA-2012-02-01-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html"
          },
          {
            "name": "[oss-security] 20110613 Re: CVE Request: PHP File upload filename",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/06/13/15"
          },
          {
            "name": "SSRT100826",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.php.net/bug.php?id=54939"
          },
          {
            "name": "RHSA-2011:1423",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php#5.3.7"
          },
          {
            "name": "[oss-security] 20110612 CVE Request: PHP File upload filename",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2011/06/12/5"
          },
          {
            "name": "RHSA-2012:0071",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0071.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/archive/2011.php#id2011-08-18-1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://pastebin.com/1edSuSVN"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request, related to a \"file path injection vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-28T12:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "48259",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/48259"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/main/rfc1867.c?r1=312103\u0026r2=312102\u0026pathrev=312103"
        },
        {
          "name": "HPSBOV02763",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.php.net/viewvc?view=revision\u0026revision=312103"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT5130"
        },
        {
          "name": "49241",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/49241"
        },
        {
          "name": "1025659",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1025659"
        },
        {
          "name": "php-sapiposthandlerfunc-sec-bypass(67999)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67999"
        },
        {
          "name": "MDVSA-2011:165",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:165"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/NEWS?view=markup\u0026pathrev=312103"
        },
        {
          "name": "44874",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/44874"
        },
        {
          "name": "DSA-2266",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2011/dsa-2266"
        },
        {
          "name": "APPLE-SA-2012-02-01-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html"
        },
        {
          "name": "[oss-security] 20110613 Re: CVE Request: PHP File upload filename",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/06/13/15"
        },
        {
          "name": "SSRT100826",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.php.net/bug.php?id=54939"
        },
        {
          "name": "RHSA-2011:1423",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php#5.3.7"
        },
        {
          "name": "[oss-security] 20110612 CVE Request: PHP File upload filename",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2011/06/12/5"
        },
        {
          "name": "RHSA-2012:0071",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2012-0071.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/archive/2011.php#id2011-08-18-1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://pastebin.com/1edSuSVN"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2011-2202",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly restrict filenames in multipart/form-data POST requests, which allows remote attackers to conduct absolute path traversal attacks, and possibly create or overwrite arbitrary files, via a crafted upload request, related to a \"file path injection vulnerability.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "48259",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/48259"
            },
            {
              "name": "http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/main/rfc1867.c?r1=312103\u0026r2=312102\u0026pathrev=312103",
              "refsource": "CONFIRM",
              "url": "http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/main/rfc1867.c?r1=312103\u0026r2=312102\u0026pathrev=312103"
            },
            {
              "name": "HPSBOV02763",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
            },
            {
              "name": "http://svn.php.net/viewvc?view=revision\u0026revision=312103",
              "refsource": "CONFIRM",
              "url": "http://svn.php.net/viewvc?view=revision\u0026revision=312103"
            },
            {
              "name": "http://support.apple.com/kb/HT5130",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT5130"
            },
            {
              "name": "49241",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/49241"
            },
            {
              "name": "1025659",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1025659"
            },
            {
              "name": "php-sapiposthandlerfunc-sec-bypass(67999)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/67999"
            },
            {
              "name": "MDVSA-2011:165",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:165"
            },
            {
              "name": "http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/NEWS?view=markup\u0026pathrev=312103",
              "refsource": "CONFIRM",
              "url": "http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/NEWS?view=markup\u0026pathrev=312103"
            },
            {
              "name": "44874",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/44874"
            },
            {
              "name": "DSA-2266",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2011/dsa-2266"
            },
            {
              "name": "APPLE-SA-2012-02-01-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html"
            },
            {
              "name": "[oss-security] 20110613 Re: CVE Request: PHP File upload filename",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2011/06/13/15"
            },
            {
              "name": "SSRT100826",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=133469208622507\u0026w=2"
            },
            {
              "name": "http://bugs.php.net/bug.php?id=54939",
              "refsource": "CONFIRM",
              "url": "http://bugs.php.net/bug.php?id=54939"
            },
            {
              "name": "RHSA-2011:1423",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php#5.3.7",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php#5.3.7"
            },
            {
              "name": "[oss-security] 20110612 CVE Request: PHP File upload filename",
              "refsource": "MLIST",
              "url": "http://openwall.com/lists/oss-security/2011/06/12/5"
            },
            {
              "name": "RHSA-2012:0071",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2012-0071.html"
            },
            {
              "name": "http://www.php.net/archive/2011.php#id2011-08-18-1",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/archive/2011.php#id2011-08-18-1"
            },
            {
              "name": "http://pastebin.com/1edSuSVN",
              "refsource": "MISC",
              "url": "http://pastebin.com/1edSuSVN"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-2202",
    "datePublished": "2011-06-16T23:00:00.000Z",
    "dateReserved": "2011-05-31T00:00:00.000Z",
    "dateUpdated": "2024-08-06T22:53:17.428Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2011-2483 (GCVE-0-2011-2483)

Vulnerability from cvelistv5 – Published: 2011-08-25 14:00 – Updated: 2024-08-06 23:00

Summary

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1111 records in the last 180 days details

References

22 references

URL	Tags
http://www.openwall.com/crypt/	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://support.apple.com/kb/HT5130	x_refsource_CONFIRM
http://php.net/security/crypt_blowfish	x_refsource_CONFIRM
http://www.securityfocus.com/bid/49241	vdb-entryx_refsource_BID
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.debian.org/security/2012/dsa-2399	vendor-advisoryx_refsource_DEBIAN
http://www.debian.org/security/2011/dsa-2340	vendor-advisoryx_refsource_DEBIAN
http://www.redhat.com/support/errata/RHSA-2011-13…	vendor-advisoryx_refsource_REDHAT
http://www.postgresql.org/docs/8.4/static/release…	x_refsource_CONFIRM
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.redhat.com/support/errata/RHSA-2011-13…	vendor-advisoryx_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2011-14…	vendor-advisoryx_refsource_REDHAT
http://www.php.net/ChangeLog-5.php#5.3.7	x_refsource_CONFIRM
http://kb.juniper.net/InfoCenter/index?page=conte…	x_refsource_CONFIRM
http://www.php.net/archive/2011.php#id2011-08-18-1	x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://freshmeat.net/projects/crypt_blowfish	x_refsource_MISC
http://www.ubuntu.com/usn/USN-1229-1	vendor-advisoryx_refsource_UBUNTU

Date Public

2011-06-21 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T23:00:34.040Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/crypt/"
          },
          {
            "name": "MDVSA-2011:180",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:180"
          },
          {
            "name": "php-cryptblowfish-info-disclosure(69319)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69319"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT5130"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://php.net/security/crypt_blowfish"
          },
          {
            "name": "49241",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/49241"
          },
          {
            "name": "MDVSA-2011:165",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:165"
          },
          {
            "name": "DSA-2399",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2012/dsa-2399"
          },
          {
            "name": "DSA-2340",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2011/dsa-2340"
          },
          {
            "name": "RHSA-2011:1378",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-1378.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.postgresql.org/docs/8.4/static/release-8-4-9.html"
          },
          {
            "name": "APPLE-SA-2012-02-01-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html"
          },
          {
            "name": "SUSE-SA:2011:035",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00015.html"
          },
          {
            "name": "MDVSA-2011:178",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:178"
          },
          {
            "name": "RHSA-2011:1377",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-1377.html"
          },
          {
            "name": "RHSA-2011:1423",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/ChangeLog-5.php#5.3.7"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/archive/2011.php#id2011-08-18-1"
          },
          {
            "name": "MDVSA-2011:179",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:179"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://freshmeat.net/projects/crypt_blowfish"
          },
          {
            "name": "USN-1229-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-1229-1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-06-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-28T12:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.openwall.com/crypt/"
        },
        {
          "name": "MDVSA-2011:180",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:180"
        },
        {
          "name": "php-cryptblowfish-info-disclosure(69319)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69319"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT5130"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://php.net/security/crypt_blowfish"
        },
        {
          "name": "49241",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/49241"
        },
        {
          "name": "MDVSA-2011:165",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:165"
        },
        {
          "name": "DSA-2399",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2012/dsa-2399"
        },
        {
          "name": "DSA-2340",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2011/dsa-2340"
        },
        {
          "name": "RHSA-2011:1378",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-1378.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.postgresql.org/docs/8.4/static/release-8-4-9.html"
        },
        {
          "name": "APPLE-SA-2012-02-01-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html"
        },
        {
          "name": "SUSE-SA:2011:035",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00015.html"
        },
        {
          "name": "MDVSA-2011:178",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:178"
        },
        {
          "name": "RHSA-2011:1377",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-1377.html"
        },
        {
          "name": "RHSA-2011:1423",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/ChangeLog-5.php#5.3.7"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/archive/2011.php#id2011-08-18-1"
        },
        {
          "name": "MDVSA-2011:179",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:179"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://freshmeat.net/projects/crypt_blowfish"
        },
        {
          "name": "USN-1229-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-1229-1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2011-2483",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.openwall.com/crypt/",
              "refsource": "CONFIRM",
              "url": "http://www.openwall.com/crypt/"
            },
            {
              "name": "MDVSA-2011:180",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:180"
            },
            {
              "name": "php-cryptblowfish-info-disclosure(69319)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69319"
            },
            {
              "name": "http://support.apple.com/kb/HT5130",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT5130"
            },
            {
              "name": "http://php.net/security/crypt_blowfish",
              "refsource": "CONFIRM",
              "url": "http://php.net/security/crypt_blowfish"
            },
            {
              "name": "49241",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/49241"
            },
            {
              "name": "MDVSA-2011:165",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:165"
            },
            {
              "name": "DSA-2399",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2012/dsa-2399"
            },
            {
              "name": "DSA-2340",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2011/dsa-2340"
            },
            {
              "name": "RHSA-2011:1378",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2011-1378.html"
            },
            {
              "name": "http://www.postgresql.org/docs/8.4/static/release-8-4-9.html",
              "refsource": "CONFIRM",
              "url": "http://www.postgresql.org/docs/8.4/static/release-8-4-9.html"
            },
            {
              "name": "APPLE-SA-2012-02-01-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html"
            },
            {
              "name": "SUSE-SA:2011:035",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00015.html"
            },
            {
              "name": "MDVSA-2011:178",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:178"
            },
            {
              "name": "RHSA-2011:1377",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2011-1377.html"
            },
            {
              "name": "RHSA-2011:1423",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2011-1423.html"
            },
            {
              "name": "http://www.php.net/ChangeLog-5.php#5.3.7",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/ChangeLog-5.php#5.3.7"
            },
            {
              "name": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705",
              "refsource": "CONFIRM",
              "url": "http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10705"
            },
            {
              "name": "http://www.php.net/archive/2011.php#id2011-08-18-1",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/archive/2011.php#id2011-08-18-1"
            },
            {
              "name": "MDVSA-2011:179",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:179"
            },
            {
              "name": "http://freshmeat.net/projects/crypt_blowfish",
              "refsource": "MISC",
              "url": "http://freshmeat.net/projects/crypt_blowfish"
            },
            {
              "name": "USN-1229-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-1229-1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-2483",
    "datePublished": "2011-08-25T14:00:00.000Z",
    "dateReserved": "2011-06-15T00:00:00.000Z",
    "dateUpdated": "2024-08-06T23:00:34.040Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2011_1423

CVE-2011-0708 (GCVE-0-2011-0708)

CVE-2011-1148 (GCVE-0-2011-1148)

CVE-2011-1466 (GCVE-0-2011-1466)

CVE-2011-1468 (GCVE-0-2011-1468)

CVE-2011-1469 (GCVE-0-2011-1469)

CVE-2011-1471 (GCVE-0-2011-1471)

CVE-2011-1938 (GCVE-0-2011-1938)

CVE-2011-2202 (GCVE-0-2011-2202)

CVE-2011-2483 (GCVE-0-2011-2483)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour