CVE-2010-3436: Medium severity PHP PHP vulnerability
Published Nov 8, 2010
·Updated
fopenwrappers.c in PHP 5.3.x through 5.3.3 might allow remote attackers to bypass openbasedir restrictions via vectors related to the length of a filename.
Affected Software
7 affected components
PHP PHP>=5.3.0<5.3.4
PHP PHP>=5.2.0<5.2.15
Ubuntu=10.10
Ubuntu=9.10
Ubuntu=8.04
Ubuntu=10.04
Ubuntu=6.06
Remediation
Patch Available
Event History
Nov 8, 2010
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the vulnerability severity of CVE-2010-3436?
CVE-2010-3436 is classified as a high severity vulnerability due to its ability to bypass open_basedir restrictions.
2
How can I mitigate CVE-2010-3436?
To mitigate CVE-2010-3436, upgrade PHP to version 5.3.4 or later.
3
Which versions of PHP are affected by CVE-2010-3436?
CVE-2010-3436 affects PHP versions 5.3.0 through 5.3.3 and also certain versions from 5.2.
4
Is CVE-2010-3436 specific to any operating systems?
CVE-2010-3436 affects multiple operating systems, including specific versions of Ubuntu Linux.
5
What type of attack does CVE-2010-3436 enable?
CVE-2010-3436 allows remote attackers to bypass restrictions meant to limit file access.