CVE-2005-3390
HighPublic exploitThe RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS"…
Published Oct 31, 2005 · Updated Aug 7, 2024
Key Facts
Patch immediately- CVE-2005-3390 is a high-severity vulnerability (CVSS 7.5 v2) affecting PHP, php7-bcmath (suse), php7-bz2 (suse) and 22 more products.
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 66% probability of exploitation in the next 30 days.
- Fixed versions are available, including PHP 0:4.3.9-3.9, php7 7.4.24-1.1, php7-bcmath 7.4.24-1.1.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v2
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS (30-day exploit likelihood)
66%
Higher than 99.2% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
Available
Proof-of-concept or weaponized module
Get the full CVE-2005-3390 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS" fileupload field.
Affected Products
160 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| PHPPHP | 3.0, 3.0.1, 3.0.10, 3.0.11, 3.0.12, 3.0.13, 3.0.14, 3.0.15 | 0:4.3.9-3.9 |
| php7-bcmathsuse | See advisory | 7.4.24-1.1 |
| php7-bz2suse | See advisory | 7.4.24-1.1 |
| php7-calendarsuse | See advisory | 7.4.24-1.1 |
| php7-clisuse | See advisory | 7.4.24-1.1 |
Patched Releases
PHP
0:4.3.9-3.9
php7
7.4.24-1.1
php7-bcmath
7.4.24-1.1
php7-bz2
7.4.24-1.1
php7-calendar
7.4.24-1.1
php7-cli
7.4.24-1.1
php7-ctype
7.4.24-1.1
php7-curl
7.4.24-1.1
php7-dba
7.4.24-1.1
php7-devel
7.4.24-1.1
php7-dom
7.4.24-1.1
php7-enchant
7.4.24-1.1
php7-exif
7.4.24-1.1
php7-fileinfo
7.4.24-1.1
php7-ftp
7.4.24-1.1
php7-gd
7.4.24-1.1
php7-gettext
7.4.24-1.1
php7-gmp
7.4.24-1.1
php7-iconv
7.4.24-1.1
php7-intl
7.4.24-1.1
php7-json
7.4.24-1.1
php7-ldap
7.4.24-1.1
php7-mbstring
7.4.24-1.1
php7-mysql
7.4.24-1.1
php7-odbc
7.4.24-1.1
Timeline
Publicly disclosed
Oct 31, 2005
Last updated
Aug 7, 2024
References
- advisoryRHSA-2005:831
- advisoryRHSA-2005:838
- advisoryRHSA-2005:882
- advisoryRHSA-2006:0549
- advisoryhttp://www.hardened-php.net/advisory_202005.79.html
FAQ
Common Questions.
The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS" fileupload field.
Affected: PHP versions 3.0, 3.0.1, 3.0.10, 3.0.11, 3.0.12, 3.0.13, 3.0.14, 3.0.15; php7-bcmath (suse); php7-bz2 (suse), among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including PHP 0:4.3.9-3.9, php7 7.4.24-1.1, php7-bcmath 7.4.24-1.1.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2005-3390 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo