CVE

Id
40994  
CVE No.
CVE-2009-3559  
Status
Candidate  
Description
** DISPUTED ** main/streams/plain_wrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safe_mode_include_dir directive, which allows context-dependent attackers to have an unknown impact by triggering the failure of PHP scripts that perform include or require operations, as demonstrated by a script that attempts to perform a require_once on a file in a standard library directory. NOTE: a reliable third party reports that this is not a vulnerability, because it results in a more restrictive security policy.  
Phase
Assigned (20091005)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
449473 40994 CVE-2009-3559 MLIST:[oss-security] 20091120 CVE request: php 5.3.1 update  View
449474 40994 CVE-2009-3559 URL:http://www.openwall.com/lists/oss-security/2009/11/20/2  View
449475 40994 CVE-2009-3559 MLIST:[oss-security] 20091120 Re: CVE request: php 5.3.1 update  View
449476 40994 CVE-2009-3559 URL:http://www.openwall.com/lists/oss-security/2009/11/20/3  View
449477 40994 CVE-2009-3559 MLIST:[oss-security] 20091120 Re: CVE request: php 5.3.1 update  View
449478 40994 CVE-2009-3559 URL:http://www.openwall.com/lists/oss-security/2009/11/20/5  View
449479 40994 CVE-2009-3559 MLIST:[php-announce] 20091119 5.3.1 Release announcement  View
449480 40994 CVE-2009-3559 URL:http://news.php.net/php.announce/79  View
449481 40994 CVE-2009-3559 MISC:http://bugs.php.net/bug.php?id=50063  View
449482 40994 CVE-2009-3559 CONFIRM:http://www.php.net/ChangeLog-5.php  View
449483 40994 CVE-2009-3559 CONFIRM:http://www.php.net/releases/5_3_1.php  View
449484 40994 CVE-2009-3559 CONFIRM:http://support.apple.com/kb/HT4077  View
449485 40994 CVE-2009-3559 APPLE:APPLE-SA-2010-03-29-1  View
449486 40994 CVE-2009-3559 URL:http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html  View
449487 40994 CVE-2009-3559 MANDRIVA:MDVSA-2009:302  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41439 JVNDB-2009-002446 NTP におけるサービス運用妨害 (DoS) の脆弱性 NTP には、mode 7 パケットの処理に起因する脆弱性が存在します。 CVE-2009-3563 40994 6.4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002446.html  View