Description

The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/.

Remediation

References

CVE-2011-0441

Related Vulnerabilities

WordPress Plugin Raygun4WP Cross-Site Scripting (1.8.2)

WordPress Plugin TheCartPress eCommerce Shopping Cart Multiple Vulnerabilities (1.3.9)

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Directory Traversal (1.3.33)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-3528)

WordPress Plugin WP htaccess Control Unspecified Vulnerability (2.4)

Severity

Medium

Classification

CVE-2011-0441 CWE-59

Tags

Missing Update Known Vulnerabilities