Description

fopen_wrappers.c in PHP 5.3.x through 5.3.3 might allow remote attackers to bypass open_basedir restrictions via vectors related to the length of a filename.

Remediation

References

CVE-2010-3436

Related Vulnerabilities

Oracle Database Server CVE-2006-0286 Vulnerability (CVE-2006-0286)

Oracle Database Server CVE-2010-2390 Vulnerability (CVE-2010-2390)

OpenSSL Other Vulnerability (CVE-2014-3505)

WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.36)

SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-2978)

Severity

Medium

Classification

CVE-2010-3436 CWE-264

Tags

Missing Update Known Vulnerabilities