CVE-2011-0441

Name of the Vulnerable Software and Affected Versions PHP version 5.3.5

Description The issue allows local users to delete arbitrary files via a symlink attack on a directory under /var/lib/php5/. This is related to the Debian GNU/Linux /etc/cron.d/php5 cron job.

Recommendations For PHP version 5.3.5, consider restricting access to the /var/lib/php5/ directory to prevent symlink attacks until a patch is available. As a temporary workaround, monitor the cron job's activity closely to detect any potential misuse.