Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2010-3436
fopen_wrappers.c in PHP 5.3.x through 5.3.3 might allow remote attackers to bypass open_basedir restrictions via vectors related to the length of a filename.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.028
EPSS Ranking
85.6%
CVSS Severity
CVSS v2 Score
5.0
References
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
http://secunia.com/advisories/42729
http://secunia.com/advisories/42812
http://security-tracker.debian.org/tracker/CVE-2010-3436
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.490619
http://support.apple.com/kb/HT4581
http://support.apple.com/kb/HT5002
http://svn.php.net/viewvc/php/php-src/trunk/main/fopen_wrappers.c?r1=303824&r2=303823&pathrev=303824
http://svn.php.net/viewvc?view=revision&revision=303824
http://www.mandriva.com/security/advisories?name=MDVSA-2010:218
http://www.php.net/ChangeLog-5.php
http://www.php.net/archive/2010.php#id2010-12-10-1
http://www.php.net/releases/5_2_15.php
http://www.php.net/releases/5_3_4.php
http://www.securityfocus.com/bid/44723
http://www.ubuntu.com/usn/USN-1042-1
http://www.vupen.com/english/advisories/2010/3313
http://www.vupen.com/english/advisories/2011/0077
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
http://secunia.com/advisories/42729
http://secunia.com/advisories/42812
http://security-tracker.debian.org/tracker/CVE-2010-3436
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.490619
http://support.apple.com/kb/HT4581
http://support.apple.com/kb/HT5002
http://svn.php.net/viewvc/php/php-src/trunk/main/fopen_wrappers.c?r1=303824&r2=303823&pathrev=303824
http://svn.php.net/viewvc?view=revision&revision=303824
http://www.mandriva.com/security/advisories?name=MDVSA-2010:218
http://www.php.net/ChangeLog-5.php
http://www.php.net/archive/2010.php#id2010-12-10-1
http://www.php.net/releases/5_2_15.php
http://www.php.net/releases/5_3_4.php
http://www.securityfocus.com/bid/44723
http://www.ubuntu.com/usn/USN-1042-1
http://www.vupen.com/english/advisories/2010/3313
http://www.vupen.com/english/advisories/2011/0077
Products affected by CVE-2010-3436
Php
»
Php
»
Version:
5.2.0
cpe:2.3:a:php:php:5.2.0
Php
»
Php
»
Version:
5.2.1
cpe:2.3:a:php:php:5.2.1
Php
»
Php
»
Version:
5.2.10
cpe:2.3:a:php:php:5.2.10
Php
»
Php
»
Version:
5.2.11
cpe:2.3:a:php:php:5.2.11
Php
»
Php
»
Version:
5.2.12
cpe:2.3:a:php:php:5.2.12
Php
»
Php
»
Version:
5.2.13
cpe:2.3:a:php:php:5.2.13
Php
»
Php
»
Version:
5.2.14
cpe:2.3:a:php:php:5.2.14
Php
»
Php
»
Version:
5.2.2
cpe:2.3:a:php:php:5.2.2
Php
»
Php
»
Version:
5.2.3
cpe:2.3:a:php:php:5.2.3
Php
»
Php
»
Version:
5.2.4
cpe:2.3:a:php:php:5.2.4
Php
»
Php
»
Version:
5.2.5
cpe:2.3:a:php:php:5.2.5
Php
»
Php
»
Version:
5.2.6
cpe:2.3:a:php:php:5.2.6
Php
»
Php
»
Version:
5.2.7
cpe:2.3:a:php:php:5.2.7
Php
»
Php
»
Version:
5.2.8
cpe:2.3:a:php:php:5.2.8
Php
»
Php
»
Version:
5.2.9
cpe:2.3:a:php:php:5.2.9
Php
»
Php
»
Version:
5.3.0
cpe:2.3:a:php:php:5.3.0
Php
»
Php
»
Version:
5.3.1
cpe:2.3:a:php:php:5.3.1
Php
»
Php
»
Version:
5.3.2
cpe:2.3:a:php:php:5.3.2
Php
»
Php
»
Version:
5.3.3
cpe:2.3:a:php:php:5.3.3
Canonical
»
Ubuntu Linux
»
Version:
10.04
cpe:2.3:o:canonical:ubuntu_linux:10.04
Canonical
»
Ubuntu Linux
»
Version:
10.10
cpe:2.3:o:canonical:ubuntu_linux:10.10
Canonical
»
Ubuntu Linux
»
Version:
6.06
cpe:2.3:o:canonical:ubuntu_linux:6.06
Canonical
»
Ubuntu Linux
»
Version:
8.04
cpe:2.3:o:canonical:ubuntu_linux:8.04
Canonical
»
Ubuntu Linux
»
Version:
9.10
cpe:2.3:o:canonical:ubuntu_linux:9.10
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved