NVD

Id
10031  
Name
CVE-2011-3379  
Description
The is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute arbitrary code by providing a crafted URL and leveraging potentially unsafe behavior in certain PEAR packages and custom autoloaders.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-11-03  
Modified Date
2012-07-03  
Seq
2011-3379  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57537 10031 CVE-2011-3379 SSRT100877  View
57538 10031 CVE-2011-3379 8525  View
57539 10031 CVE-2011-3379 http://svn.php.net/viewvc/?view=revision&revision=317183  View
57540 10031 CVE-2011-3379 http://www.byte.nl/blog/2011/09/23/security-bug-in-is_a-function-in-php-5-3-7-5-3-8/  View
57541 10031 CVE-2011-3379 20110923 Security issue is_a function in PHP 5.3.7+  View
57542 10031 CVE-2011-3379 https://bugs.php.net/bug.php?id=55475  View
57543 10031 CVE-2011-3379 https://bugzilla.redhat.com/show_bug.cgi?id=741020  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32530 JVNDB-2011-002770 PHP の is_a 関数における任意のコードを実行される脆弱性 PHP の is_a 関数は、__autoload 関数の呼び出しを誘発するため、任意のコードを実行される脆弱性が存在します。 CVE-2011-3379 51286 CVE-2011-3379 10031 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002770.html 2011-08-22 2011-11-10 View