Lucene search
PRIOn knowledge basePRION:CVE-2011-3379HistoryNov 03, 2011 - 3:55 p.m.
Code injection
2011-11-0315:55:00
PRIOn knowledge base
www.prio-n.com
3
The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute arbitrary code by providing a crafted URL and leveraging potentially unsafe behavior in certain PEAR packages and custom autoloaders.
References
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03360041
securityreason.com/securityalert/8525
svn.php.net/viewvc/?view=revision&revision=317183
www.securityfocus.com/archive/1/519770/30/0/threaded
bugs.php.net/bug.php?id=55475
bugzilla.redhat.com/show_bug.cgi?id=741020
www.byte.nl/blog/2011/09/23/security-bug-in-is_a-function-in-php-5-3-7-5-3-8/
Related
nessus
nessus
Fedora 16 : php-5.3.8-3.fc16 (2011-13472)
2011-10-10 00:00:00
Fedora 15 : php-5.3.8-3.fc15 (2011-13446)
2011-10-10 00:00:00
Fedora 14 : php-5.3.8-3.fc14 (2011-13458)
2011-10-10 00:00:00
cvelist
cvelist
CVE-2011-3379
2011-11-03 15:00:00
CVE-2011-4078
2011-11-03 15:00:00
openvas
openvas
Fedora Update for php FEDORA-2011-13446
2011-10-10 00:00:00
Fedora Update for php FEDORA-2011-13458
2011-10-10 00:00:00
PHP 'is_a()' Function Remote File Include Vulnerability
2011-10-12 00:00:00
ubuntucve
ubuntucve
CVE-2011-3379
2011-11-03 00:00:00
CVE-2011-4078
2011-11-03 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: php-5.3.8-3.fc14
2011-10-08 18:03:14
[SECURITY] Fedora 16 Update: php-5.3.8-3.fc16
2011-10-09 19:34:08
[SECURITY] Fedora 15 Update: php-5.3.8-3.fc15
2011-10-08 17:58:50
securityvulns
securityvulns
PHP is_a function vulnerability
2011-09-26 00:00:00
[ MDVSA-2012:071 ] php
2012-05-14 00:00:00
cve
cve
CVE-2011-3379
2011-11-03 15:55:00
CVE-2011-4078
2011-11-03 15:55:00
nvd
nvd
CVE-2011-3379
2011-11-03 15:55:00
CVE-2011-4078
2011-11-03 15:55:00
prion
prion
Sql injection
2011-11-03 15:55:00
debiancve
debiancve
CVE-2011-4078
2011-11-03 15:55:00
amazon
amazon
Important: php
2011-10-11 00:07:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2012-09-24 00:00:00