Skip to content
OpenAdvisories
Unscored DSA-789-1 3 CVEs

php4 - several

Published Aug 29, 2005 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 3.0 php4 4:4.1.2-7.woody5
Debian · 3.1 php4 4:4.3.10-16

Vulnerabilities 3

  • Unscored —

    Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack …

  • Unscored —
    CVE-2005-1921 Public exploit EPSS 79%

    Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For P…

  • Unscored —

    Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products includ…