CVE-2005-3390

The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a GLOBALS fileupload field.

Affected Software

Name	Vendor	Start Version	End Version
Php	Php	3.0 (including)	3.0 (including)
Php	Php	3.0.1 (including)	3.0.1 (including)
Php	Php	3.0.2 (including)	3.0.2 (including)
Php	Php	3.0.3 (including)	3.0.3 (including)
Php	Php	3.0.4 (including)	3.0.4 (including)
Php	Php	3.0.5 (including)	3.0.5 (including)
Php	Php	3.0.6 (including)	3.0.6 (including)
Php	Php	3.0.7 (including)	3.0.7 (including)
Php	Php	3.0.8 (including)	3.0.8 (including)
Php	Php	3.0.9 (including)	3.0.9 (including)
Php	Php	3.0.10 (including)	3.0.10 (including)
Php	Php	3.0.11 (including)	3.0.11 (including)
Php	Php	3.0.12 (including)	3.0.12 (including)
Php	Php	3.0.13 (including)	3.0.13 (including)
Php	Php	3.0.14 (including)	3.0.14 (including)
Php	Php	3.0.15 (including)	3.0.15 (including)
Php	Php	3.0.16 (including)	3.0.16 (including)
Php	Php	3.0.17 (including)	3.0.17 (including)
Php	Php	3.0.18 (including)	3.0.18 (including)
Php	Php	4.0.0 (including)	4.0.0 (including)
Php	Php	4.0.1 (including)	4.0.1 (including)
Php	Php	4.0.1-patch1 (including)	4.0.1-patch1 (including)
Php	Php	4.0.1-patch2 (including)	4.0.1-patch2 (including)
Php	Php	4.0.2 (including)	4.0.2 (including)
Php	Php	4.0.3 (including)	4.0.3 (including)
Php	Php	4.0.3-patch1 (including)	4.0.3-patch1 (including)
Php	Php	4.0.4 (including)	4.0.4 (including)
Php	Php	4.0.5 (including)	4.0.5 (including)
Php	Php	4.0.6 (including)	4.0.6 (including)
Php	Php	4.0.7 (including)	4.0.7 (including)
Php	Php	4.0.7-rc1 (including)	4.0.7-rc1 (including)
Php	Php	4.0.7-rc2 (including)	4.0.7-rc2 (including)
Php	Php	4.0.7-rc3 (including)	4.0.7-rc3 (including)
Php	Php	4.1.0 (including)	4.1.0 (including)
Php	Php	4.1.1 (including)	4.1.1 (including)
Php	Php	4.1.2 (including)	4.1.2 (including)
Php	Php	4.2 (including)	4.2 (including)
Php	Php	4.2.0 (including)	4.2.0 (including)
Php	Php	4.2.1 (including)	4.2.1 (including)
Php	Php	4.2.2 (including)	4.2.2 (including)
Php	Php	4.2.3 (including)	4.2.3 (including)
Php	Php	4.3.0 (including)	4.3.0 (including)
Php	Php	4.3.1 (including)	4.3.1 (including)
Php	Php	4.3.2 (including)	4.3.2 (including)
Php	Php	4.3.3 (including)	4.3.3 (including)
Php	Php	4.3.4 (including)	4.3.4 (including)
Php	Php	4.3.5 (including)	4.3.5 (including)
Php	Php	4.3.6 (including)	4.3.6 (including)
Php	Php	4.3.7 (including)	4.3.7 (including)
Php	Php	4.3.8 (including)	4.3.8 (including)
Php	Php	4.3.9 (including)	4.3.9 (including)
Php	Php	4.3.10 (including)	4.3.10 (including)
Php	Php	4.3.11 (including)	4.3.11 (including)
Php	Php	4.4.0 (including)	4.4.0 (including)
Php	Php	5.0-rc1 (including)	5.0-rc1 (including)
Php	Php	5.0-rc2 (including)	5.0-rc2 (including)
Php	Php	5.0-rc3 (including)	5.0-rc3 (including)
Php	Php	5.0.0 (including)	5.0.0 (including)
Php	Php	5.0.1 (including)	5.0.1 (including)
Php	Php	5.0.2 (including)	5.0.2 (including)
Php	Php	5.0.3 (including)	5.0.3 (including)
Php	Php	5.0.4 (including)	5.0.4 (including)
Php	Php	5.0.5 (including)	5.0.5 (including)
Red Hat Enterprise Linux 3	RedHat	php-0:4.3.2-26.ent	*
Red Hat Enterprise Linux 4	RedHat	php-0:4.3.9-3.9	*
Red Hat Enterprise Linux AS (Advanced Server) version 2.1	RedHat		*
Red Hat Enterprise Linux ES version 2.1	RedHat		*
Red Hat Enterprise Linux WS version 2.1	RedHat		*
Red Hat Linux Advanced Workstation 2.1	RedHat		*
Red Hat Stronghold 4	RedHat		*
Stronghold 4.0 for Red Hat Enterprise Linux AS (version 2.1)	RedHat		*
Php4	Ubuntu	dapper	*
Php4	Ubuntu	edgy	*
Php5	Ubuntu	dapper	*
Php5	Ubuntu	devel	*
Php5	Ubuntu	edgy	*
Php5	Ubuntu	feisty	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2005-3390
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References