CVE-2011-0754
Status: ModifiedMedium (4.4)—
Severity4.4Medium · CVSS 2.0
Exploitation probability0.34 %higher than 26% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitNot knownno public code found
The SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat structure, related to lack of a FILE_ATTRIBUTE_REPARSE_POINT check.
CVSS
- Base score
- 4.4
- Version
- 2.0
- Vector
- AV:L/AC:M/Au:N/C:P/I:P/A:P
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days
- 0.34 %
- Percentile among all scored CVEs
- 26
- Score date
- 10/23/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-59
References
Show 8 references
- http://bugs.php.net/51763
- http://www.php.net/ChangeLog-5.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65429
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12334
- http://bugs.php.net/51763
- http://www.php.net/ChangeLog-5.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65429
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12334
Raw JSON (NVD)
Show
{
"id": "CVE-2011-0754",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.4,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.4,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2011-02-02T22:00:02.270",
"references": [
{
"url": "http://bugs.php.net/51763",
"source": "cve@mitre.org"
},
{
"url": "http://www.php.net/ChangeLog-5.php",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65429",
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12334",
"source": "cve@mitre.org"
},
{
"url": "http://bugs.php.net/51763",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.php.net/ChangeLog-5.php",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65429",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12334",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-59"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The SplFileInfo::getType function in the Standard PHP Library (SPL) extension in PHP before 5.3.4 on Windows does not properly detect symbolic links, which might make it easier for local users to conduct symlink attacks by leveraging cross-platform differences in the stat structure, related to lack of a FILE_ATTRIBUTE_REPARSE_POINT check."
},
{
"lang": "es",
"value": "La función SplFileInfo::getType PHP Library (SPL) en la extensión en PHP anterior a v5.3.4 en Windows no detecta correctamente los enlaces simbólicos, lo que podría facilitar a los usuarios locales el realizar ataques de enlace simbólico mediante el aprovechamiento de las diferencias entre plataformas en el estructura stat, relacionada con la falta de un control FILE_ATTRIBUTE_REPARSE_POINT."
}
],
"lastModified": "2026-06-16T23:28:00.473",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8DBECF81-14F2-419F-9910-C86CA83328EB",
"versionEndIncluding": "5.3.3"
},
{
"criteria": "cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92647629-083F-4042-8365-4AD2EBC9C1BF"
},
{
"criteria": "cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47"
},
{
"criteria": "cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83BE1120-6370-4470-8586-6581EDF3FD69"
},
{
"criteria": "cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "245C601D-0FE7-47E3-8304-6FF45E9567D6"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "691BB8BB-329A-4640-B758-7590C99B5E42"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2BC4CCE-2774-463E-82EA-36CD442D3A7B"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C478024C-2FCD-463F-A75E-E04660AA9DF1"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1851ADE5-C70C-46E0-941A-6ADF7DB5C126"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69DA3BA2-AF53-4C9D-93FA-0317841595B1"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67B59D6A-7EDA-4C34-81D6-C2557C85D164"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AEBA40B6-8FDF-41AA-8166-F491FF7F3118"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E74E2B72-A428-4BB3-B6F8-0AF5E487A807"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "945FF149-3446-4905-BCA1-C397E3497B58"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E446DBD-FEFA-4D22-9C9D-51F61C01E414"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C8DE728-78E1-4F9F-BC56-CD9B10E61287"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80E31CC6-9356-4BB7-9F49-320AAF341E1E"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B3E7199-8FB7-4930-9C0A-A36A698940B3"
},
{
"criteria": "cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EDBEC461-D553-41B7-8D85-20B6A933C21C"
},
{
"criteria": "cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AEEF2298-98E8-409F-9205-84817CEF947B"
},
{
"criteria": "cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6AFC00BA-D64D-4407-AC69-FDD9FF013943"
},
{
"criteria": "cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D80F2A8B-B57F-4970-867A-55E8187C1502"
},
{
"criteria": "cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"
},
{
"criteria": "cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49965B80-DC27-4864-BDF0-CBBFF16BFD80"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13A159B4-B847-47DE-B7F8-89384E6C551B"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57B59616-A309-40B4-94B1-50A7BC00E35C"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F39A1B1-416E-4436-8007-733B66904A14"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D724D09-0D45-4701-93C9-348301217C8C"
},
{
"criteria": "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6713614A-B14E-4A85-BF89-ED780068FC68"
},
{
"criteria": "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
},
{
"criteria": "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
},
{
"criteria": "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
},
{
"criteria": "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC1460DF-1687-4314-BF1A-01290B20302D"
},
{
"criteria": "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "470380B0-3982-48FC-871B-C8B43C81900D"
},
{
"criteria": "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57B71BB7-5239-4860-9100-8CABC3992D8C"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11579E5C-D7CF-46EE-B015-5F4185C174E7"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D2937B3-D034-400E-84F5-33833CE3764D"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C2AF1D9-33B6-4B2C-9269-426B6B720164"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84B70263-37AA-4539-A286-12038A3792C6"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E46E4B4-808C-4B47-81D9-EC2B02A5E57B"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FF30D7F-353B-4496-9A89-4EF2BB279E0A"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD97DF34-35AB-4979-96E2-B23DC8556A79"
},
{
"criteria": "cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9EF4B938-BB14-4C06-BEE9-10CA755C5DEF"
},
{
"criteria": "cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "981C922C-7A7D-473E-8C43-03AB62FB5B8B"
},
{
"criteria": "cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D0CD11A-09C2-4C60-8F0C-68E55BD6EE63"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}