Skip to content
OpenAdvisories
Unscored RHSA-2013:1307 6 CVEs

Red Hat Security Advisory: php53 security, bug fix and enhancement update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 44

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-bcmath 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-cli 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-common 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-dba 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-debuginfo 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-devel 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-gd 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-imap 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-intl 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-ldap 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-mbstring 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-mysql 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-odbc 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-pdo 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-pgsql 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-process 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-pspell 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-snmp 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-soap 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-xml 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation php53-xmlrpc 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-bcmath 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-cli 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-common 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-dba 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-debuginfo 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-devel 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-gd 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-imap 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-intl 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-ldap 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-mbstring 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-mysql 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-odbc 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-pdo 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-pgsql 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-process 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-pspell 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-snmp 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-soap 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-xml 0:5.3.3-21.el5
Red Hat · RHEL 5 enterprise_linux:5::server php53-xmlrpc 0:5.3.3-21.el5

Vulnerabilities 6

  • Unscored —
    CVE-2006-7243

    PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intend…

  • Unscored —
    CVE-2011-1398 Public exploit EPSS 10%

    The sapi_header_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does not check for %0D sequen…

  • Unscored —
    CVE-2012-0831

    PHP before 5.3.10 does not properly perform a temporary change to the magic_quotes_gpc directive during the importing o…

  • Unscored —
    CVE-2012-2688 Public exploit EPSS 10%

    Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4…

  • Unscored —
    CVE-2013-1643 EPSS 10%

    The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP…

  • Unscored —
    CVE-2013-4248

    The openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/5/html/5.10_Technical_Notes/php53.html#RHSA-2013-1307
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=662707
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=789468
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=828051
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=837044
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=853329
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=869691
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=869693
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=869697
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=892695
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=918187
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=951075
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=953818
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=997097
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1307.json
  • report
    https://access.redhat.com/security/cve/CVE-2006-7243
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-7243
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-7243
  • report
    https://access.redhat.com/security/cve/CVE-2011-1398
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1398
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1398
  • report
    https://access.redhat.com/security/cve/CVE-2012-0831
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0831
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0831
  • report
    https://access.redhat.com/security/cve/CVE-2012-2688
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-2688
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-2688
  • report
    https://access.redhat.com/security/cve/CVE-2013-1643
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1643
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1643
  • report
    https://access.redhat.com/security/cve/CVE-2013-4248
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-4248
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-4248