CVE-2005-3390

Publication date 1 November 2005

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a “GLOBALS” fileupload field.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
php4 7.04 feisty Not in release
6.10 edgy
Fixed 4.4.2-1build1
6.06 LTS dapper
Fixed 4.4.2-1build1
php5 7.04 feisty
Fixed 5.2.1-0ubuntu1.4
6.10 edgy
Fixed 5.1.6-1ubuntu2.6
6.06 LTS dapper
Fixed 5.1.2-1ubuntu3.9

References

Related Ubuntu Security Notices (USN)

    • USN-232-1
    • PHP vulnerabilities
    • 23 December 2005

Other references