CVE-2005-3389 (GCVE-0-2005-3389)

Vulnerability from cvelistv5 – Published: 2005-11-01 02:00 – Updated: 2024-08-07 23:10
VLAI
Summary
The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an internal flag that enables register_globals and allows attackers to exploit vulnerabilities in PHP applications that would otherwise be protected.
Severity
No CVSS data available.
CWE
  • n/a
Assigner
References
URL Tags
http://www.securityfocus.com/bid/15249 vdb-entryx_refsource_BID
http://secunia.com/advisories/21252 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/22691 third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/134 third-party-advisoryx_refsource_SREASON
http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
http://www.redhat.com/support/errata/RHSA-2005-831.html vendor-advisoryx_refsource_REDHAT
http://www.turbolinux.com/security/2006/TLSA-2006… vendor-advisoryx_refsource_TURBO
http://support.avaya.com/elmodocs2/security/ASA-2… x_refsource_CONFIRM
http://secunia.com/advisories/18198 third-party-advisoryx_refsource_SECUNIA
http://itrc.hp.com/service/cki/docDisplay.do?docI… vendor-advisoryx_refsource_HP
http://secunia.com/advisories/18054 third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2005/2254 vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/archive/1/415291 mailing-listx_refsource_BUGTRAQ
http://securitytracker.com/id?1015131 vdb-entryx_refsource_SECTRACK
http://www.hardened-php.net/advisory_192005.78.html x_refsource_MISC
http://secunia.com/advisories/17559 third-party-advisoryx_refsource_SECUNIA
http://www.fedoralegacy.org/updates/FC2/2005-11-2… vendor-advisoryx_refsource_FEDORA
http://secunia.com/advisories/17371 third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/4320 vdb-entryx_refsource_VUPEN
http://rhn.redhat.com/errata/RHSA-2006-0549.html vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/17490 third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/419504/100… vendor-advisoryx_refsource_SUSE
https://oval.cisecurity.org/repository/search/def… vdb-entrysignaturex_refsource_OVAL
http://www.php.net/release_4_4_1.php x_refsource_CONFIRM
http://secunia.com/advisories/17510 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17531 third-party-advisoryx_refsource_SECUNIA
http://www.openpkg.org/security/OpenPKG-SA-2005.0… vendor-advisoryx_refsource_OPENPKG
http://secunia.com/advisories/18669 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17557 third-party-advisoryx_refsource_SECUNIA
http://www.gentoo.org/security/en/glsa/glsa-20051… vendor-advisoryx_refsource_GENTOO
https://www.ubuntu.com/usn/usn-232-1/ vendor-advisoryx_refsource_UBUNTU
http://www.redhat.com/support/errata/RHSA-2005-838.html vendor-advisoryx_refsource_REDHAT
http://www.novell.com/linux/security/advisories/2… vendor-advisoryx_refsource_SUSE
Date Public
2005-10-31 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:10:08.579Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "15249",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15249"
          },
          {
            "name": "21252",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21252"
          },
          {
            "name": "22691",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22691"
          },
          {
            "name": "134",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/134"
          },
          {
            "name": "MDKSA-2005:213",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213"
          },
          {
            "name": "RHSA-2005:831",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-831.html"
          },
          {
            "name": "TLSA-2006-38",
            "tags": [
              "vendor-advisory",
              "x_refsource_TURBO",
              "x_transferred"
            ],
            "url": "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm"
          },
          {
            "name": "18198",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18198"
          },
          {
            "name": "SSRT061238",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
          },
          {
            "name": "HPSBMA02159",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
          },
          {
            "name": "18054",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18054"
          },
          {
            "name": "ADV-2005-2254",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2254"
          },
          {
            "name": "20051031 Advisory 19/2005: PHP register_globals Activation Vulnerability in parse_str()",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/415291"
          },
          {
            "name": "1015131",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015131"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.hardened-php.net/advisory_192005.78.html"
          },
          {
            "name": "17559",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17559"
          },
          {
            "name": "FLSA:166943",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html"
          },
          {
            "name": "17371",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17371"
          },
          {
            "name": "ADV-2006-4320",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4320"
          },
          {
            "name": "RHSA-2006:0549",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html"
          },
          {
            "name": "17490",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17490"
          },
          {
            "name": "SUSE-SA:2005:069",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/419504/100/0/threaded"
          },
          {
            "name": "oval:org.mitre.oval:def:11481",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11481"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.php.net/release_4_4_1.php"
          },
          {
            "name": "17510",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17510"
          },
          {
            "name": "17531",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17531"
          },
          {
            "name": "OpenPKG-SA-2005.027",
            "tags": [
              "vendor-advisory",
              "x_refsource_OPENPKG",
              "x_transferred"
            ],
            "url": "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html"
          },
          {
            "name": "18669",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18669"
          },
          {
            "name": "17557",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17557"
          },
          {
            "name": "GLSA-200511-08",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml"
          },
          {
            "name": "USN-232-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://www.ubuntu.com/usn/usn-232-1/"
          },
          {
            "name": "RHSA-2005:838",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2005-838.html"
          },
          {
            "name": "SUSE-SR:2005:027",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-10-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an internal flag that enables register_globals and allows attackers to exploit vulnerabilities in PHP applications that would otherwise be protected."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "15249",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15249"
        },
        {
          "name": "21252",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21252"
        },
        {
          "name": "22691",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22691"
        },
        {
          "name": "134",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/134"
        },
        {
          "name": "MDKSA-2005:213",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213"
        },
        {
          "name": "RHSA-2005:831",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-831.html"
        },
        {
          "name": "TLSA-2006-38",
          "tags": [
            "vendor-advisory",
            "x_refsource_TURBO"
          ],
          "url": "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm"
        },
        {
          "name": "18198",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18198"
        },
        {
          "name": "SSRT061238",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
        },
        {
          "name": "HPSBMA02159",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
        },
        {
          "name": "18054",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18054"
        },
        {
          "name": "ADV-2005-2254",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2254"
        },
        {
          "name": "20051031 Advisory 19/2005: PHP register_globals Activation Vulnerability in parse_str()",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/415291"
        },
        {
          "name": "1015131",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015131"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.hardened-php.net/advisory_192005.78.html"
        },
        {
          "name": "17559",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17559"
        },
        {
          "name": "FLSA:166943",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html"
        },
        {
          "name": "17371",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17371"
        },
        {
          "name": "ADV-2006-4320",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4320"
        },
        {
          "name": "RHSA-2006:0549",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html"
        },
        {
          "name": "17490",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17490"
        },
        {
          "name": "SUSE-SA:2005:069",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.securityfocus.com/archive/1/419504/100/0/threaded"
        },
        {
          "name": "oval:org.mitre.oval:def:11481",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11481"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.php.net/release_4_4_1.php"
        },
        {
          "name": "17510",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17510"
        },
        {
          "name": "17531",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17531"
        },
        {
          "name": "OpenPKG-SA-2005.027",
          "tags": [
            "vendor-advisory",
            "x_refsource_OPENPKG"
          ],
          "url": "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html"
        },
        {
          "name": "18669",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18669"
        },
        {
          "name": "17557",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17557"
        },
        {
          "name": "GLSA-200511-08",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml"
        },
        {
          "name": "USN-232-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://www.ubuntu.com/usn/usn-232-1/"
        },
        {
          "name": "RHSA-2005:838",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2005-838.html"
        },
        {
          "name": "SUSE-SR:2005:027",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-3389",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an internal flag that enables register_globals and allows attackers to exploit vulnerabilities in PHP applications that would otherwise be protected."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "15249",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15249"
            },
            {
              "name": "21252",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21252"
            },
            {
              "name": "22691",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22691"
            },
            {
              "name": "134",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/134"
            },
            {
              "name": "MDKSA-2005:213",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:213"
            },
            {
              "name": "RHSA-2005:831",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2005-831.html"
            },
            {
              "name": "TLSA-2006-38",
              "refsource": "TURBO",
              "url": "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm"
            },
            {
              "name": "18198",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18198"
            },
            {
              "name": "SSRT061238",
              "refsource": "HP",
              "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
            },
            {
              "name": "HPSBMA02159",
              "refsource": "HP",
              "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522"
            },
            {
              "name": "18054",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18054"
            },
            {
              "name": "ADV-2005-2254",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/2254"
            },
            {
              "name": "20051031 Advisory 19/2005: PHP register_globals Activation Vulnerability in parse_str()",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/415291"
            },
            {
              "name": "1015131",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015131"
            },
            {
              "name": "http://www.hardened-php.net/advisory_192005.78.html",
              "refsource": "MISC",
              "url": "http://www.hardened-php.net/advisory_192005.78.html"
            },
            {
              "name": "17559",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17559"
            },
            {
              "name": "FLSA:166943",
              "refsource": "FEDORA",
              "url": "http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html"
            },
            {
              "name": "17371",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17371"
            },
            {
              "name": "ADV-2006-4320",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/4320"
            },
            {
              "name": "RHSA-2006:0549",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html"
            },
            {
              "name": "17490",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17490"
            },
            {
              "name": "SUSE-SA:2005:069",
              "refsource": "SUSE",
              "url": "http://www.securityfocus.com/archive/1/419504/100/0/threaded"
            },
            {
              "name": "oval:org.mitre.oval:def:11481",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11481"
            },
            {
              "name": "http://www.php.net/release_4_4_1.php",
              "refsource": "CONFIRM",
              "url": "http://www.php.net/release_4_4_1.php"
            },
            {
              "name": "17510",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17510"
            },
            {
              "name": "17531",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17531"
            },
            {
              "name": "OpenPKG-SA-2005.027",
              "refsource": "OPENPKG",
              "url": "http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html"
            },
            {
              "name": "18669",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18669"
            },
            {
              "name": "17557",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17557"
            },
            {
              "name": "GLSA-200511-08",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml"
            },
            {
              "name": "USN-232-1",
              "refsource": "UBUNTU",
              "url": "https://www.ubuntu.com/usn/usn-232-1/"
            },
            {
              "name": "RHSA-2005:838",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2005-838.html"
            },
            {
              "name": "SUSE-SR:2005:027",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2005_27_sr.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-3389",
    "datePublished": "2005-11-01T02:00:00.000Z",
    "dateReserved": "2005-11-01T00:00:00.000Z",
    "dateUpdated": "2024-08-07T23:10:08.579Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2005-3389",
      "date": "2026-10-03",
      "epss": "0.06299",
      "percentile": "0.93401"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.