Skip to content

CVE-2011-0441

The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete...

6.3 MediumFix available

CVE-2011-0441 is a medium vulnerability (CVSS 6.3) in Php, published March 19, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in php5 5.2.6.dfsg.1-1+lenny10.

The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/.

Exploit likelihood

0.34%Down 0.7 points since Feb 4, 2022

What each source reports

NVD Score used 6.3

The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/.

Record: CVE-2011-0441
CVSS 2.0: 6.3 MediumAV:L/AC:M/Au:N/C:N/I:C/A:C
Weakness: CWE-59
Updated: 2026-11-02

CVE List No score

The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/.

Record: CVE-2011-0441
Updated: 2026-11-02

EUVDEUVD-2011-0466 No score

The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/.

Record: EUVD-2011-0466
Updated: 2026-11-03

GitHub AdvisoriesGHSA-78gc-jmvw-x2mx No score

The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete...

The Debian GNU/Linux /etc/cron.d/php5 cron job for PHP 5.3.5 allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/.

Record: GHSA-78gc-jmvw-x2mx
Weakness: CWE-59
Updated: 2026-11-02

Affected products

php

Affected packages

Affected packages
Package	Affected	Fixed
`php5` Debian:5.0	before 5.2.6.dfsg.1-1+lenny10, plus listed versions 5.2.6.dfsg.1-1+lenny25.2.6.dfsg.1-1+lenny35.2.6.dfsg.1-1+lenny45.2.6.dfsg.1-1+lenny65.2.6.dfsg.1-1+lenny85.2.6.dfsg.1-1+lenny9	5.2.6.dfsg.1-1+lenny10
`php5` Debian:6.0	before 5.3.3-7+squeeze1, plus listed versions 5.3.3-7	5.3.3-7+squeeze1

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References