CVE-2005-3391: High severity PHP PHP vulnerability
Published Nov 1, 2005
·Updated
Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safemode and openbasedir restrictions via unknown attack vectors in (1) ext/curl and (2) ext/gd.
Affected Software
54 affected components
PHP PHP=4.3.9
PHP PHP=3.0
PHP PHP=3.0.5
PHP PHP=3.0.11
PHP PHP=4.2.0
PHP PHP=3.0.1
PHP PHP=3.0.2
PHP PHP=4.1.0
PHP PHP=4.3.4
PHP PHP=4.0.4
PHP PHP=4.3.0
PHP PHP=4.0.5
PHP PHP=3.0.8
PHP PHP=4.3.6
PHP PHP=3.0.13
PHP PHP=4.0.7-rc2
PHP PHP=4.3.7
PHP PHP=4.0.7-rc1
PHP PHP=4.2.2
PHP PHP=3.0.7
PHP PHP=4.3.2
PHP PHP=4.3.11
PHP PHP=4.0.0
PHP PHP=3.0.6
PHP PHP=4.0.3-patch1
PHP PHP=3.0.17
PHP PHP=4.0.7
PHP PHP=4.0.2
PHP PHP=4.3.3
PHP PHP=4.1.1
PHP PHP=3.0.15
PHP PHP=3.0.16
PHP PHP=3.0.10
PHP PHP=3.0.4
PHP PHP=4.2.3
PHP PHP=4.0.1-patch1
PHP PHP=4.0.1-patch2
PHP PHP=4.0.6
PHP PHP=4.1.2
PHP PHP=4.0.7-rc3
PHP PHP=4.3.1
PHP PHP=3.0.18
PHP PHP=4.4.0
PHP PHP=4.3.10
PHP PHP=4.2.1
PHP PHP=4.0.1
PHP PHP=3.0.12
PHP PHP=4.2
PHP PHP=4.0.3
PHP PHP=3.0.14
PHP PHP=3.0.9
PHP PHP=3.0.3
PHP PHP=4.3.8
PHP PHP=4.3.5
Remediation
Patch Available
Patch Available
Event History
Nov 1, 2005
CVE Published
12:47 PM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3391?
CVE-2005-3391 is considered to have a moderate severity level due to its potential to allow unauthorized access to file systems.
2
How do I fix CVE-2005-3391?
To fix CVE-2005-3391, upgrade PHP to version 4.4.1 or later to eliminate the vulnerability.
3
What versions of PHP are affected by CVE-2005-3391?
CVE-2005-3391 affects PHP versions earlier than 4.4.1, including 3.x and 4.x series.
4
What vulnerabilities are associated with CVE-2005-3391?
CVE-2005-3391 involves multiple vulnerabilities that allow attackers to bypass safe_mode and open_basedir restrictions.
5
Can CVE-2005-3391 be exploited remotely?
Yes, CVE-2005-3391 can be exploited remotely by attackers who target affected PHP installations.