CVE-2005-3389
The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting,…
Does this matter?
Lower severity and a low EPSS score (6.30%). Track it; it rarely justifies an emergency change on its own.
Description
The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an internal flag that enables register_globals and allows attackers to exploit vulnerabilities in PHP applications that would otherwise be protected.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 6.30% probability · 94th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Affected
- php/php
- Source
- cve@mitre.org
EPSS 6.3% since 26 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522
- http://rhn.redhat.com/errata/RHSA-2006-0549.html
- http://secunia.com/advisories/17371Patch, Vendor Advisory
- http://secunia.com/advisories/17490Vendor Advisory
- http://secunia.com/advisories/17510Vendor Advisory
- http://secunia.com/advisories/17531Vendor Advisory
- http://secunia.com/advisories/17557Vendor Advisory
- http://secunia.com/advisories/17559Vendor Advisory
- http://secunia.com/advisories/18054Vendor Advisory
- http://secunia.com/advisories/18198Vendor Advisory
- http://secunia.com/advisories/18669Vendor Advisory
- http://secunia.com/advisories/21252Vendor Advisory
- http://secunia.com/advisories/22691Vendor Advisory
- http://securityreason.com/securityalert/134
- http://securitytracker.com/id?1015131
- http://support.avaya.com/elmodocs2/security/ASA-2006-037.htm
- http://www.fedoralegacy.org/updates/FC2/2005-11-28-FLSA_2005_166943__Updated_php_packages_fix_security_issues.html
- http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml
- http://www.hardened-php.net/advisory_192005.78.htmlVendor Advisory
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:213
- http://www.novell.com/linux/security/advisories/2005_27_sr.html
- http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html
- http://www.php.net/release_4_4_1.phpPatch
- http://www.redhat.com/support/errata/RHSA-2005-831.html
- http://www.redhat.com/support/errata/RHSA-2005-838.html
- http://www.securityfocus.com/archive/1/415291
- http://www.securityfocus.com/archive/1/419504/100/0/threaded
- http://www.securityfocus.com/bid/15249Patch
- http://www.turbolinux.com/security/2006/TLSA-2006-38.txt
- http://www.vupen.com/english/advisories/2005/2254Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.