Description

The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/.

Remediation

References

CVE-2011-0441

Related Vulnerabilities

Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-12616)

Apache read beyond bounds in mod_isapi Vulnerability (CVE-2022-28330)

MySQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-0375)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-3670)

WordPress Plugin Simple Video Embedder Cross-Site Scripting (2.2)

Severity

Medium

Classification

CVE-2011-0441 CWE-59

Tags

Missing Update Known Vulnerabilities