NVD

Id
42202  
Name
CVE-2012-0057  
Description
PHP before 5.3.9 has improper libxslt security settings, which allows remote attackers to create arbitrary files via a crafted XSLT stylesheet that uses the libxslt output extension.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-02-01  
Modified Date
2012-07-03  
Seq
2012-0057  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
213077 42202 CVE-2012-0057 HPSBMU02786  View
213078 42202 CVE-2012-0057 openSUSE-SU-2012:0426  View
213079 42202 CVE-2012-0057 [oss-security] 20120113 Re: CVE affected for PHP 5.3.9 ?  View
213080 42202 CVE-2012-0057 [oss-security] 20120113 CVE affected for PHP 5.3.9 ?  View
213081 42202 CVE-2012-0057 [oss-security] 20120113 Re: CVE affected for PHP 5.3.9 ?  View
213082 42202 CVE-2012-0057 [oss-security] 20120113 Re: CVE affected for PHP 5.3.9 ?  View
213083 42202 CVE-2012-0057 [oss-security] 20120113 Re: CVE affected for PHP 5.3.9 ?  View
213084 42202 CVE-2012-0057 [oss-security] 20120113 Re: CVE affected for PHP 5.3.9 ?  View
213085 42202 CVE-2012-0057 [oss-security] 20120114 Re: CVE affected for PHP 5.3.9 ?  View
213086 42202 CVE-2012-0057 [oss-security] 20120114 Re: CVE affected for PHP 5.3.9 ?  View
213087 42202 CVE-2012-0057 [oss-security] 20120115 Re: CVE affected for PHP 5.3.9 ?  View
213088 42202 CVE-2012-0057 [oss-security] 20120115 Re: CVE affected for PHP 5.3.9 ?  View
213089 42202 CVE-2012-0057 [oss-security] 20120114 Re: CVE affected for PHP 5.3.9 ?  View
213090 42202 CVE-2012-0057 [oss-security] 20120117 Re: CVE affected for PHP 5.3.9 ?  View
213091 42202 CVE-2012-0057 http://php.net/ChangeLog-5.php#5.3.9  View
213092 42202 CVE-2012-0057 DSA-2399  View
213093 42202 CVE-2012-0057 php-libxslt-security-bypass(72908)  View
213094 42202 CVE-2012-0057 https://bugs.php.net/bug.php?id=54446  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33422 JVNDB-2011-003662 PHP における任意のファイルを作成される脆弱性 PHP は、不適切な libxslt セキュリティ設定であるため、任意のファイルを作成される脆弱性が存在します。 CVE-2012-0057 53295 CVE-2012-0057 42202 6.4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003662.html 2011-04-01 2012-02-03 View