CVE-2011-3379

NameCVE-2011-3379
DescriptionThe is_a function in PHP 5.3.7 and 5.3.8 triggers a call to the __autoload function, which makes it easier for remote attackers to execute arbitrary code by providing a crafted URL and leveraging potentially unsafe behavior in certain PEAR packages and custom autoloaders.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
php5sourcelenny(not affected)
php5sourcesqueeze(not affected)
php5source(unstable)5.3.9-1

Notes

[squeeze] - php5 <not-affected> (Introduced in 5.3.7)
[lenny] - php5 <not-affected> (Introduced in 5.3.7)
Search for package or bug name: Reporting problems