CVE-2005-3390 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2005-3390
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-3390

Description: The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS" fileupload field.

CVE Status: Candidate

References: UBUNTU http://www.ubuntulinux.org/usn/usn-232-1/document_view SUSE http://www.novell.com/linux/security/advisories/2005_27_sr.html http://www.securityfocus.com/archive/1/archive/1/419504/100/0/threaded ST 1015129 SREASON http://securityreason.com/securityalert/132 SAID Secunia Advisory: SA17559 Secunia Advisory: SA17371 Secunia Advisory: SA18054 Secunia Advisory: SA18198 Secunia Advisory: SA17490 Secunia Advisory: SA17510 Secunia Advisory: SA17531 Secunia Advisory: SA17557 Secunia Advisory: SA18669 Secunia Advisory: SA21252 Secunia Advisory: SA22691 REDHAT http://www.redhat.com/support/errata/RHSA-2005-838.html http://rhn.redhat.com/errata/RHSA-2006-0549.html http://www.redhat.com/support/errata/RHSA-2005-831.html OPENPKG http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html MISC http://www.hardened-php.net/globals-problem http://www.hardened-php.net/advisory_202005.79.html MANDRIVA http://frontal2.mandriva.com/security/advisories?name=MDKSA-2005:213 HP http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml FEDORA http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm http://www.php.net/release_4_4_1.php BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/415290/30/0/threaded BID 15250

Return to the previous page.