CVE-2005-3054: Low severity PHP PHP vulnerability
fopenwrappers.c in PHP 4.4.0, and possibly other versions, does not properly restrict access to other directories when the openbasedir directive includes a trailing slash, which allows PHP scripts in one directory to access files in other directories whose names are substrings of the original directory.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3054?
CVE-2005-3054 has been classified as a moderate severity vulnerability.
How does CVE-2005-3054 affect PHP applications?
CVE-2005-3054 allows PHP scripts to access files outside of their designated directories when the open_basedir directive is misconfigured.
How do I fix CVE-2005-3054?
To fix CVE-2005-3054, ensure that the open_basedir directive is correctly set without a trailing slash.
What versions of PHP are affected by CVE-2005-3054?
CVE-2005-3054 specifically affects PHP version 4.4.0 and potentially other versions leading up to that release.
Is there a patch available for CVE-2005-3054?
Yes, upgrading to a later version of PHP that addresses this vulnerability is recommended to mitigate CVE-2005-3054.