VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 2, 2011· Updated Jun 16, 2026

CVE-2011-0754

CVE-2011-0754

Description

The SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat structure, related to lack of a FILE_ATTRIBUTE_REPARSE_POINT check.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

70
  • PHP/PHP70 versions
    cpe:2.3:a:php:php:*:*:*:*:*:*:*:*+ 69 more
    • cpe:2.3:a:php:php:*:*:*:*:*:*:*:*range: <=5.3.3
    • cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*
    • (no CPE)range: <5.3.4

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.