Vulnerability Description
PHPIDS before 0.7 does not properly implement Regular Expression Denial of Service (ReDoS) filters, which allows remote attackers to bypass rulesets and add PHP sequences to a file via unspecified vectors.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Phpids | Phpids | <= 0.6.5 |
Related Weaknesses (CWE)
References
- https://sitewat.ch/Advisory/View/7URL Repurposed
- https://sitewat.ch/Advisory/View/7URL Repurposed
FAQ
What is CVE-2011-5021?
CVE-2011-5021 is a vulnerability with a CVSS score of 7.5 (HIGH). PHPIDS before 0.7 does not properly implement Regular Expression Denial of Service (ReDoS) filters, which allows remote attackers to bypass rulesets and add PHP sequences to a file via unspecified vec...
How severe is CVE-2011-5021?
CVE-2011-5021 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-5021?
Check the references section above for vendor advisories and patch information. Affected products include: Phpids Phpids.