PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the file_exists function.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Airport | — | Upgrade macOS to the latest versionApply OS X security update 2011-001Apply OS X security update 2011-004 | Aug 28, 2015 | Jan 18, 2011 |
| Apple Osx Php | — | Upgrade macOS to the latest version | Dec 16, 2011 | Jan 18, 2011 |
| Centos_linux | — | Upgrade php-mysqlUpgrade php-soapUpgrade php-ldapUpgrade php-pdoUpgrade php-ncursesUpgrade php-bcmathUpgrade php-dbaUpgrade php-commonUpgrade php-pgsqlUpgrade php-odbcUpgrade php-imapUpgrade php-xmlrpcUpgrade php-develUpgrade php-snmpUpgrade php-cliUpgrade php-gdUpgrade php-mbstringUpgrade php-xmlUpgrade php | Dec 1, 2016 | Jan 18, 2011 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 20, 2013 |
| Freebsd | — | Upgrade php52Upgrade php5 | Dec 10, 2025 | Jan 13, 2011 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Jan 18, 2011 |
| Hpux | — | Update hpuxws22APCH32.MOD_JK to the latest versionUpdate hpuxws22APCH32.MOD_PERL to the latest versionUpdate hpuxws22APCH32.AUTH_LDAP2 to the latest versionUpdate hpuxws22APCH32.MOD_JK2 to the latest versionUpdate hpuxws22APCH32.AUTH_LDAP to the latest versionUpdate hpuxws22APCH32.PHP to the latest versionUpdate hpuxws22APCH32.APACHE2 to the latest versionUpdate hpuxws22APCH32.WEBPROXY to the latest versionUpdate hpuxws22APCH32.APACHE to the latest versionUpdate hpuxws22APCH32.MOD_PERL2 to the latest versionUpdate hpuxws22TOMCAT.TOMCAT to the latest versionUpdate hpuxws22APCH32.PHP2 to the latest version | Aug 11, 2017 | Jan 18, 2011 |
| Oracle_linux | — | Upgrade php-fpmUpgrade php53-mbstringUpgrade php53-xmlrpcUpgrade php53-soapUpgrade php-xmlUpgrade php53-pspellUpgrade php-soapUpgrade php-dbaUpgrade php53-pgsqlUpgrade php53-xmlUpgrade php-develUpgrade php53-ldapUpgrade php-pspellUpgrade php53-intlUpgrade php-processUpgrade php53-processUpgrade php-cliUpgrade php-gdUpgrade php-mysqlUpgrade php53-develUpgrade php53-commonUpgrade php53-mysqlUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php53-cliUpgrade php-imapUpgrade php53-imapUpgrade php53-dbaUpgrade php-bcmathUpgrade php-pdoUpgrade php-ldapUpgrade php53Upgrade php-pgsqlUpgrade phpUpgrade php-snmpUpgrade php53-gdUpgrade php-embeddedUpgrade php53-snmpUpgrade php-tidyUpgrade php-ncursesUpgrade php-odbcUpgrade php-enchantUpgrade php-intlUpgrade php53-odbcUpgrade php-recodeUpgrade php-ztsUpgrade php53-bcmathUpgrade php-commonUpgrade php53-pdo | Oct 16, 2024 | Jan 18, 2011 |
| Php | — | Upgrade to PHP version 5.3.4 | Oct 1, 2012 | Jan 18, 2011 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 18, 2006 |
| Suse | — | Upgrade php7-xmlwriterUpgrade php53-gmpUpgrade php7-pgsqlUpgrade php7-mysqlUpgrade php53-xmlrpcUpgrade php8-pharUpgrade php8-sysvshmUpgrade php8-pgsqlUpgrade php53-intlUpgrade php53-xslUpgrade php53-develUpgrade php8-intlUpgrade php8-gdUpgrade apache2-mod_php53Upgrade php8-soapUpgrade apache2-mod_php8Upgrade php7-develUpgrade php7-sqliteUpgrade php53-tokenizerUpgrade php53-fileinfoUpgrade php8-fastcgiUpgrade php8-readlineUpgrade php8-bcmathUpgrade php8-bz2Upgrade php8-gettextUpgrade php53-pcntlUpgrade php53-jsonUpgrade php7-ctypeUpgrade php7-iconvUpgrade php53-mysqlUpgrade php53-domUpgrade php7-tokenizerUpgrade php53-exifUpgrade php8-sodiumUpgrade php53-ftpUpgrade apache2-mod_php7Upgrade php8-exifUpgrade php8-enchantUpgrade php8-sqliteUpgrade php53-sysvmsgUpgrade php8-ldapUpgrade php72-develUpgrade php8-ffiUpgrade php8-opcacheUpgrade php53-soapUpgrade php53-wddxUpgrade php8-pdoUpgrade php53Upgrade php7-jsonUpgrade php53-pspellUpgrade php53-opensslUpgrade php53-xmlwriterUpgrade php8-calendarUpgrade php8-shmopUpgrade php8-sysvsemUpgrade php53-sysvsemUpgrade php8-domUpgrade php53-calendarUpgrade php8-posixUpgrade php53-bcmathUpgrade php8-zipUpgrade php5-develUpgrade php8-ctypeUpgrade php8-tidyUpgrade php53-zlibUpgrade php7Upgrade php53-iconvUpgrade php53-imapUpgrade php53-ldapUpgrade php53-zipUpgrade php53-bz2Upgrade php8-curlUpgrade php8-cliUpgrade php53-readlineUpgrade php8-ftpUpgrade php53-pdoUpgrade php53-mcryptUpgrade php53-gettextUpgrade php8-opensslUpgrade php8-xmlreaderUpgrade php7-domUpgrade php53-odbcUpgrade php8-socketsUpgrade php8-iconvUpgrade php53-ctypeUpgrade php53-snmpUpgrade php8-embedUpgrade php8-mbstringUpgrade php8-tokenizerUpgrade php8-snmpUpgrade php8-dbaUpgrade php8-pcntlUpgrade php53-mbstringUpgrade php53-shmopUpgrade php8-xmlwriterUpgrade php8-fpmUpgrade php53-fastcgiUpgrade php8-odbcUpgrade php53-tidyUpgrade php53-suhosinUpgrade php8-gmpUpgrade php8-zlibUpgrade php53-sysvshmUpgrade php8-sysvmsgUpgrade php8Upgrade php7-xmlreaderUpgrade php53-sqliteUpgrade php8-fpm-apacheUpgrade php53-dbaUpgrade php53-posixUpgrade php8-develUpgrade php53-curlUpgrade php8-xslUpgrade php53-pgsqlUpgrade php53-pearUpgrade php53-xmlreaderUpgrade php8-mysqlUpgrade php8-fileinfoUpgrade php53-socketsUpgrade php53-gdUpgrade php7-pdo | Apr 26, 2018 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5-cgiUpgrade php5-cliUpgrade php5-gdUpgrade php5-curlUpgrade php5-intlUpgrade php5-commonUpgrade libapache2-mod-php5Upgrade php5Upgrade php-pearUpgrade php5-dev | Nov 8, 2024 | Jan 18, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub