CVE-2011-0441: PHP

Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/.

Affected products

• PHP PHP: version 5.3.5 only

Published 2011-03-29. Last modified 2026-06-16.