CVE-2011-1469
Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent...
Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper.
Exploit likelihood
What each source reports
NVD Score used
4.3
Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper.
- Record
CVE-2011-1469- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper.
- Record
CVE-2011-1469- Updated
- 2026-11-02
EUVDEUVD-2011-1474 No score
Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper.
- Record
EUVD-2011-1474- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6634-cf24-8gph No score
Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent...
Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper.
- Record
GHSA-6634-cf24-8gph- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php5Debian:6.0 |
before 5.3.3-7+squeeze8, plus listed versions 5.3.3-75.3.3-7+squeeze15.3.3-7+squeeze25.3.3-7+squeeze35.3.3-7+squeeze55.3.3-7+squeeze65.3.3-7+squeeze7 |
5.3.3-7+squeeze8 |
php53Red Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-bcmathRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-cliRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-commonRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-dbaRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-develRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-gdRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-imapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
Show 102 moreShow less
| Package | Affected | Fixed |
|---|---|---|
php53-intlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-ldapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-mbstringRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-mysqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-odbcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-pdoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-pgsqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-processRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-pspellRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-snmpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-soapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-xmlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-xmlrpcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53Red Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-bcmathRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-cliRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-commonRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-dbaRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-develRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-gdRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-imapRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-intlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-ldapRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-mbstringRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-mysqlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-odbcRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-pdoRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-pgsqlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-processRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-pspellRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-snmpRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-soapRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-xmlRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
php53-xmlrpcRed Hat:enterprise_linux:5::server |
before 0:5.3.3-1.el5_7.3 | 0:5.3.3-1.el5_7.3 |
phpRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-cliRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-commonRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-debuginfoRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-gdRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-ldapRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-mysqlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-odbcRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-pdoRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-pgsqlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-soapRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-xmlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-xmlrpcRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-bcmathRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-dbaRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-develRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-embeddedRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-enchantRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-imapRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-intlRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-mbstringRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-processRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-pspellRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-recodeRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-snmpRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-tidyRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
php-ztsRed Hat:enterprise_linux:6::server |
before 0:5.3.3-3.el6_1.3 | 0:5.3.3-3.el6_1.3 |
phpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-cliRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-commonRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-dbaRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-develRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-gdRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-imapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-ldapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-odbcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-pdoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-snmpRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-soapRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-xmlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
phpRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-bcmathRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-cliRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-commonRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-dbaRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-develRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-gdRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-imapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-ldapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-mbstringRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-mysqlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-ncursesRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-odbcRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-pdoRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-pgsqlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-snmpRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-soapRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-xmlRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
php-xmlrpcRed Hat:enterprise_linux:5::server |
before 0:5.1.6-27.el5_7.4 | 0:5.1.6-27.el5_7.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1469 is a medium vulnerability (CVSS 4.3) in Php, published March 20, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.34%, the 91st percentile. Fixed in php5 5.3.3-7+squeeze8.
References
mandriva.com/security/advisories?name=MDVSA-2011:053
php.net/ChangeLog-5.php
lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
securityfocus.com/bid/46970
redhat.com/support/errata/RHSA-2011-1423.html
mandriva.com/security/advisories?name=MDVSA-2011:052
Show 54 moreShow less
vupen.com/english/advisories/2011/0744
bugs.php.net/bug.php?id=54092
support.apple.com/kb/HT5002
nvd.nist.gov/vuln/detail/CVE-2011-1469
github.com/advisories/GHSA-6634-cf24-8gph
access.redhat.com/errata/RHSA-2011:1423
access.redhat.com/security/updates/classification
php.net/security/crypt_blowfish.php
bugzilla.redhat.com/show_bug.cgi?id=680972
bugzilla.redhat.com/show_bug.cgi?id=688958
bugzilla.redhat.com/show_bug.cgi?id=689386
bugzilla.redhat.com/show_bug.cgi?id=690899
bugzilla.redhat.com/show_bug.cgi?id=690905
bugzilla.redhat.com/show_bug.cgi?id=690915
bugzilla.redhat.com/show_bug.cgi?id=709067
bugzilla.redhat.com/show_bug.cgi?id=713194
bugzilla.redhat.com/show_bug.cgi?id=715025
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1423.json
access.redhat.com/security/cve/CVE-2011-0708
cve.org/CVERecord?id=CVE-2011-0708
nvd.nist.gov/vuln/detail/CVE-2011-0708
access.redhat.com/security/cve/CVE-2011-1148
cve.org/CVERecord?id=CVE-2011-1148
nvd.nist.gov/vuln/detail/CVE-2011-1148
access.redhat.com/security/cve/CVE-2011-1466
cve.org/CVERecord?id=CVE-2011-1466
nvd.nist.gov/vuln/detail/CVE-2011-1466
access.redhat.com/security/cve/CVE-2011-1468
cve.org/CVERecord?id=CVE-2011-1468
nvd.nist.gov/vuln/detail/CVE-2011-1468
access.redhat.com/security/cve/CVE-2011-1469
cve.org/CVERecord?id=CVE-2011-1469
access.redhat.com/security/cve/CVE-2011-1471
cve.org/CVERecord?id=CVE-2011-1471
nvd.nist.gov/vuln/detail/CVE-2011-1471
access.redhat.com/security/cve/CVE-2011-1938
cve.org/CVERecord?id=CVE-2011-1938
nvd.nist.gov/vuln/detail/CVE-2011-1938
access.redhat.com/security/cve/CVE-2011-2202
cve.org/CVERecord?id=CVE-2011-2202
nvd.nist.gov/vuln/detail/CVE-2011-2202
access.redhat.com/security/cve/CVE-2011-2483
cve.org/CVERecord?id=CVE-2011-2483
nvd.nist.gov/vuln/detail/CVE-2011-2483
access.redhat.com/errata/RHSA-2012:0033
bugzilla.redhat.com/show_bug.cgi?id=750547
bugzilla.redhat.com/show_bug.cgi?id=758413
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0033.json
access.redhat.com/security/cve/CVE-2011-4566
cve.org/CVERecord?id=CVE-2011-4566
nvd.nist.gov/vuln/detail/CVE-2011-4566
access.redhat.com/security/cve/CVE-2011-4885
cve.org/CVERecord?id=CVE-2011-4885
nvd.nist.gov/vuln/detail/CVE-2011-4885