NVD

Id
48073  
Name
CVE-2009-0754  
Description
PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on the same server.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-03-03  
Modified Date
2010-08-21  
Seq
2009-0754  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
241177 48073 CVE-2009-0754 http://bugs.php.net/bug.php?id=27421  View
241178 48073 CVE-2009-0754 SUSE-SR:2009:008  View
241179 48073 CVE-2009-0754 oval:org.mitre.oval:def:11035  View
241180 48073 CVE-2009-0754 DSA-1789  View
241181 48073 CVE-2009-0754 [oss-security] 20090130 CVE Request - php (PHP BZ#27421)  View
241182 48073 CVE-2009-0754 [oss-security] 20090203 Re: CVE Request - php (PHP BZ#27421)  View
241183 48073 CVE-2009-0754 [oss-security] 20090225 Re: CVE Request - php (PHP BZ#27421)  View
241184 48073 CVE-2009-0754 RHSA-2009:0350  View
241185 48073 CVE-2009-0754 1021979  View
241186 48073 CVE-2009-0754 USN-761-1  View
241187 48073 CVE-2009-0754 FEDORA-2009-3768  View
241188 48073 CVE-2009-0754 FEDORA-2009-3848  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40401 JVNDB-2009-001407 PHP における同じ Web サーバ上でホストされた別サイトの振る舞いを変更される脆弱性 Apache 上で稼動する PHP には、同じ Web サーバをホストとする別のサイトの動きを改変される脆弱性が存在します。 CVE-2009-0754 38185 CVE-2009-0754 48073 2.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001407.html 2009-03-03 2010-10-19 View