The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing null characters.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Php | — | Upgrade to PHP version 5.1.5Upgrade to PHP version 4.4.3 | Oct 1, 2012 | May 29, 2006 |
| Suse | — | Upgrade mod_php4-servletUpgrade php4-recodeUpgrade php4-exifUpgrade php4-sysvshmUpgrade php5-suhosinUpgrade mod_php4-coreUpgrade php4-mbstringUpgrade php4-fastcgiUpgrade php4-develUpgrade php4-gdUpgrade php4-pearUpgrade apache-mod_php4Upgrade php4-mysqlUpgrade php4-curlUpgrade php4-imapUpgrade php4-sessionUpgrade php4-wddxUpgrade apache2-mod_php4Upgrade php4-pgsql | Feb 17, 2015 | May 29, 2006 |
| Ubuntu | — | Upgrade php4-cgiUpgrade php4-cliUpgrade libapache2-mod-php5Upgrade libapache2-mod-php4Upgrade php5-cliUpgrade php5-curlUpgrade php5-cgi | Nov 8, 2024 | May 29, 2006 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub