VULNERABILITY INTELLIGENCE

CVE-2011-0441

CVSS score6.3 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2011-03-29
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:N/I:C/A:C

Description

The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/.

Weakness classification

  • CWE-59: Improper Link Resolution Before File Access ('Link Following')

Primary references