PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the file_exists function.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Airport | — | Apply OS X security update 2011-001Upgrade macOS to the latest versionApply OS X security update 2011-004 | Aug 28, 2015 | Jan 18, 2011 |
| Apple Osx Php | — | Upgrade macOS to the latest version | Dec 16, 2011 | Jan 18, 2011 |
| Centos_linux | — | Upgrade php-pdoUpgrade php-ldapUpgrade phpUpgrade php-imapUpgrade php-mbstringUpgrade php-commonUpgrade php-xmlUpgrade php-develUpgrade php-snmpUpgrade php-pgsqlUpgrade php-odbcUpgrade php-xmlrpcUpgrade php-mysqlUpgrade php-bcmathUpgrade php-soapUpgrade php-ncursesUpgrade php-dbaUpgrade php-gdUpgrade php-cli | Dec 1, 2016 | Jan 18, 2011 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 20, 2013 |
| Freebsd | — | Upgrade php52Upgrade php5 | Dec 10, 2025 | Jan 13, 2011 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Jan 18, 2011 |
| Hpux | — | Update hpuxws22APCH32.MOD_JK to the latest versionUpdate hpuxws22APCH32.AUTH_LDAP2 to the latest versionUpdate hpuxws22APCH32.APACHE2 to the latest versionUpdate hpuxws22APCH32.MOD_PERL to the latest versionUpdate hpuxws22APCH32.PHP to the latest versionUpdate hpuxws22APCH32.MOD_JK2 to the latest versionUpdate hpuxws22APCH32.AUTH_LDAP to the latest versionUpdate hpuxws22APCH32.APACHE to the latest versionUpdate hpuxws22APCH32.MOD_PERL2 to the latest versionUpdate hpuxws22APCH32.PHP2 to the latest versionUpdate hpuxws22APCH32.WEBPROXY to the latest versionUpdate hpuxws22TOMCAT.TOMCAT to the latest version | Aug 11, 2017 | Jan 18, 2011 |
| Oracle_linux | — | Upgrade php53-soapUpgrade php-mbstringUpgrade php53-mysqlUpgrade php-xmlrpcUpgrade php-soapUpgrade php-xmlUpgrade php-fpmUpgrade php53-xmlUpgrade php-mysqlUpgrade php53-pgsqlUpgrade php53-intlUpgrade php53-processUpgrade php-develUpgrade php-cliUpgrade php53-pspellUpgrade php-processUpgrade php53-ldapUpgrade php53-commonUpgrade php-gdUpgrade php53-develUpgrade php53-mbstringUpgrade php-pspellUpgrade php53-xmlrpcUpgrade php-dbaUpgrade php53-odbcUpgrade php53-imapUpgrade php-bcmathUpgrade php53-pdoUpgrade php-commonUpgrade php-recodeUpgrade php-odbcUpgrade php-ldapUpgrade php53-gdUpgrade php53Upgrade phpUpgrade php-pgsqlUpgrade php53-dbaUpgrade php-enchantUpgrade php53-cliUpgrade php-ztsUpgrade php-intlUpgrade php-tidyUpgrade php-imapUpgrade php-ncursesUpgrade php-pdoUpgrade php-snmpUpgrade php-embeddedUpgrade php53-snmpUpgrade php53-bcmath | Oct 16, 2024 | Jan 18, 2011 |
| Php | — | Upgrade to PHP version 5.3.4 | Oct 1, 2012 | Jan 18, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 18, 2006 |
| Suse | — | Upgrade php8-pgsqlUpgrade php8-intlUpgrade php8-ffiUpgrade php53-wddxUpgrade php8-bcmathUpgrade php53-fileinfoUpgrade php53-ftpUpgrade php53-xmlwriterUpgrade php53-xmlrpcUpgrade php53-mysqlUpgrade php8-ldapUpgrade php53-sysvmsgUpgrade php8-sqliteUpgrade php72-develUpgrade php7-xmlwriterUpgrade apache2-mod_php8Upgrade php53-gmpUpgrade php8-sodiumUpgrade php7-iconvUpgrade php53Upgrade php8-readlineUpgrade php53-intlUpgrade apache2-mod_php7Upgrade php53-sysvsemUpgrade php7-develUpgrade php8-soapUpgrade php8-opcacheUpgrade php53-jsonUpgrade php53-develUpgrade apache2-mod_php53Upgrade php8-enchantUpgrade php53-domUpgrade php7-mysqlUpgrade php53-pcntlUpgrade php53-opensslUpgrade php7-jsonUpgrade php8-gdUpgrade php53-soapUpgrade php8-sysvshmUpgrade php7-ctypeUpgrade php8-calendarUpgrade php8-pdoUpgrade php8-gettextUpgrade php7-sqliteUpgrade php53-pspellUpgrade php8-fastcgiUpgrade php8-sysvsemUpgrade php8-exifUpgrade php53-xslUpgrade php53-tokenizerUpgrade php8-bz2Upgrade php8-pharUpgrade php8-shmopUpgrade php53-exifUpgrade php7-tokenizerUpgrade php7-pgsqlUpgrade php8-domUpgrade php8-fileinfoUpgrade php8-ftpUpgrade php53-suhosinUpgrade php8-zipUpgrade php8-curlUpgrade php8-iconvUpgrade php53-calendarUpgrade php8-mbstringUpgrade php53-imapUpgrade php53-gettextUpgrade php53-posixUpgrade php5-develUpgrade php53-mbstringUpgrade php53-fastcgiUpgrade php53-zipUpgrade php8-pcntlUpgrade php7-xmlreaderUpgrade php53-pdoUpgrade php53-ctypeUpgrade php8-cliUpgrade php8-odbcUpgrade php8-mysqlUpgrade php53-mcryptUpgrade php8-socketsUpgrade php7-domUpgrade php8-opensslUpgrade php8-xmlreaderUpgrade php8-dbaUpgrade php53-sqliteUpgrade php53-readlineUpgrade php53-snmpUpgrade php8-zlibUpgrade php8-embedUpgrade php53-curlUpgrade php8-xslUpgrade php8Upgrade php53-sysvshmUpgrade php53-tidyUpgrade php53-pearUpgrade php8-tokenizerUpgrade php8-gmpUpgrade php53-pgsqlUpgrade php53-iconvUpgrade php8-sysvmsgUpgrade php53-dbaUpgrade php53-shmopUpgrade php8-xmlwriterUpgrade php8-fpm-apacheUpgrade php8-tidyUpgrade php8-develUpgrade php53-xmlreaderUpgrade php8-snmpUpgrade php53-bcmathUpgrade php53-gdUpgrade php7Upgrade php53-socketsUpgrade php8-fpmUpgrade php53-bz2Upgrade php8-posixUpgrade php53-ldapUpgrade php53-zlibUpgrade php8-ctypeUpgrade php7-pdoUpgrade php53-odbc | Apr 26, 2018 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libapache2-mod-php5Upgrade php5Upgrade php-pearUpgrade php5-devUpgrade php5-cgiUpgrade php5-gdUpgrade php5-commonUpgrade php5-intlUpgrade php5-curlUpgrade php5-cli | Nov 8, 2024 | Jan 18, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub