CVE-2011-0754
Severity Score
4.4
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat structure, related to lack of a FILE_ATTRIBUTE_REPARSE_POINT check.
La función SplFileInfo::getType PHP Library (SPL) en la extensión en PHP anterior a v5.3.4 en Windows no detecta correctamente los enlaces simbólicos, lo que podría facilitar a los usuarios locales el realizar ataques de enlace simbólico mediante el aprovechamiento de las diferencias entre plataformas en el estructura stat, relacionada con la falta de un control FILE_ATTRIBUTE_REPARSE_POINT.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-02-02 CVE Reserved
- 2011-02-02 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-59: Improper Link Resolution Before File Access ('Link Following')
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://bugs.php.net/51763 | X_refsource_confirm | |
| http://www.php.net/ChangeLog-5.php | X_refsource_confirm | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/65429 | Vdb Entry | |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12334 | Signature |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | <= 5.3.3 Search vendor "Php" for product "Php" and version " <= 5.3.3" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 1.0 Search vendor "Php" for product "Php" and version "1.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 2.0 Search vendor "Php" for product "Php" and version "2.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 2.0b10 Search vendor "Php" for product "Php" and version "2.0b10" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0 Search vendor "Php" for product "Php" and version "3.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0.1 Search vendor "Php" for product "Php" and version "3.0.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0.2 Search vendor "Php" for product "Php" and version "3.0.2" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0.3 Search vendor "Php" for product "Php" and version "3.0.3" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0.4 Search vendor "Php" for product "Php" and version "3.0.4" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0.5 Search vendor "Php" for product "Php" and version "3.0.5" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0.6 Search vendor "Php" for product "Php" and version "3.0.6" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0.7 Search vendor "Php" for product "Php" and version "3.0.7" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0.8 Search vendor "Php" for product "Php" and version "3.0.8" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0.9 Search vendor "Php" for product "Php" and version "3.0.9" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0.10 Search vendor "Php" for product "Php" and version "3.0.10" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0.11 Search vendor "Php" for product "Php" and version "3.0.11" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0.12 Search vendor "Php" for product "Php" and version "3.0.12" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0.13 Search vendor "Php" for product "Php" and version "3.0.13" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0.14 Search vendor "Php" for product "Php" and version "3.0.14" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0.15 Search vendor "Php" for product "Php" and version "3.0.15" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0.16 Search vendor "Php" for product "Php" and version "3.0.16" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0.17 Search vendor "Php" for product "Php" and version "3.0.17" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 3.0.18 Search vendor "Php" for product "Php" and version "3.0.18" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.0 Search vendor "Php" for product "Php" and version "4.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.0 Search vendor "Php" for product "Php" and version "4.0" | beta_4_patch1 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.0 Search vendor "Php" for product "Php" and version "4.0" | beta1 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.0 Search vendor "Php" for product "Php" and version "4.0" | beta2 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.0 Search vendor "Php" for product "Php" and version "4.0" | beta3 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.0 Search vendor "Php" for product "Php" and version "4.0" | beta4 |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.0.0 Search vendor "Php" for product "Php" and version "4.0.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.0.1 Search vendor "Php" for product "Php" and version "4.0.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.0.2 Search vendor "Php" for product "Php" and version "4.0.2" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.0.3 Search vendor "Php" for product "Php" and version "4.0.3" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.0.4 Search vendor "Php" for product "Php" and version "4.0.4" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.0.5 Search vendor "Php" for product "Php" and version "4.0.5" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.0.6 Search vendor "Php" for product "Php" and version "4.0.6" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.0.7 Search vendor "Php" for product "Php" and version "4.0.7" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.1.0 Search vendor "Php" for product "Php" and version "4.1.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.1.1 Search vendor "Php" for product "Php" and version "4.1.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.1.2 Search vendor "Php" for product "Php" and version "4.1.2" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.2.0 Search vendor "Php" for product "Php" and version "4.2.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.2.1 Search vendor "Php" for product "Php" and version "4.2.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.2.2 Search vendor "Php" for product "Php" and version "4.2.2" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.2.3 Search vendor "Php" for product "Php" and version "4.2.3" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.3.0 Search vendor "Php" for product "Php" and version "4.3.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.3.1 Search vendor "Php" for product "Php" and version "4.3.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.3.2 Search vendor "Php" for product "Php" and version "4.3.2" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.3.3 Search vendor "Php" for product "Php" and version "4.3.3" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.3.4 Search vendor "Php" for product "Php" and version "4.3.4" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.3.5 Search vendor "Php" for product "Php" and version "4.3.5" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.3.6 Search vendor "Php" for product "Php" and version "4.3.6" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.3.7 Search vendor "Php" for product "Php" and version "4.3.7" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.3.8 Search vendor "Php" for product "Php" and version "4.3.8" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.3.9 Search vendor "Php" for product "Php" and version "4.3.9" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.3.10 Search vendor "Php" for product "Php" and version "4.3.10" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.3.11 Search vendor "Php" for product "Php" and version "4.3.11" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.4.0 Search vendor "Php" for product "Php" and version "4.4.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.4.1 Search vendor "Php" for product "Php" and version "4.4.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.4.2 Search vendor "Php" for product "Php" and version "4.4.2" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.4.3 Search vendor "Php" for product "Php" and version "4.4.3" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.4.4 Search vendor "Php" for product "Php" and version "4.4.4" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.4.5 Search vendor "Php" for product "Php" and version "4.4.5" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.4.6 Search vendor "Php" for product "Php" and version "4.4.6" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.4.7 Search vendor "Php" for product "Php" and version "4.4.7" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.4.8 Search vendor "Php" for product "Php" and version "4.4.8" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 4.4.9 Search vendor "Php" for product "Php" and version "4.4.9" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.3.0 Search vendor "Php" for product "Php" and version "5.3.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.3.1 Search vendor "Php" for product "Php" and version "5.3.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Php Search vendor "Php" | Php Search vendor "Php" for product "Php" | 5.3.2 Search vendor "Php" for product "Php" and version "5.3.2" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|