CVE-2009-3559 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2009-3559 Interim 1 49 2025-11-05T06:04:36Z current 2021-05-30T12:48:42Z 2025-11-05T06:04:36Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2009-3559 main/streams/plain_wrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safe_mode_include_dir directive, which allows context-dependent attackers to have an unknown impact by triggering the failure of PHP scripts that perform include or require operations, as demonstrated by a script that attempts to perform a require_once on a file in a standard library directory. NOTE: a reliable third party reports that this is not a vulnerability, because it results in a more restrictive security policy. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SLES for SAP Applications 11 SP3 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 tomcat tomcat-admin-webapps tomcat-docs-webapp tomcat-el-3_0-api tomcat-javadoc tomcat-jsp-2_3-api tomcat-lib tomcat-servlet-3_1-api tomcat-servlet-4_0-api tomcat-webapps tomcat6 tomcat6-admin-webapps tomcat6-docs-webapp tomcat6-javadoc tomcat6-jsp-2_1-api tomcat6-lib tomcat6-servlet-2_5-api tomcat6-webapps tomcat as a component of HPE Helion OpenStack 8 tomcat-admin-webapps as a component of HPE Helion OpenStack 8 tomcat-docs-webapp as a component of HPE Helion OpenStack 8 tomcat-el-3_0-api as a component of HPE Helion OpenStack 8 tomcat-javadoc as a component of HPE Helion OpenStack 8 tomcat-jsp-2_3-api as a component of HPE Helion OpenStack 8 tomcat-lib as a component of HPE Helion OpenStack 8 tomcat-servlet-3_1-api as a component of HPE Helion OpenStack 8 tomcat-webapps as a component of HPE Helion OpenStack 8 tomcat6 as a component of SLES for SAP Applications 11 SP3 tomcat as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 tomcat as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 tomcat6 as a component of SUSE Linux Enterprise Server 11 SP1 tomcat6 as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata tomcat6 as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-admin-webapps as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-docs-webapp as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-javadoc as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-jsp-2_1-api as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-lib as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-servlet-2_5-api as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6-webapps as a component of SUSE Linux Enterprise Server 11 SP3 tomcat6 as a component of SUSE Linux Enterprise Server 11 SP3 LTSS tomcat6 as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata tomcat6 as a component of SUSE Linux Enterprise Server 11 SP4 LTSS tomcat6 as a component of SUSE Linux Enterprise Server 11 SP4-LTSS tomcat6-admin-webapps as a component of SUSE Linux Enterprise Server 11 SP4-LTSS tomcat6-docs-webapp as a component of SUSE Linux Enterprise Server 11 SP4-LTSS tomcat6-javadoc as a component of SUSE Linux Enterprise Server 11 SP4-LTSS tomcat6-jsp-2_1-api as a component of SUSE Linux Enterprise Server 11 SP4-LTSS tomcat6-lib as a component of SUSE Linux Enterprise Server 11 SP4-LTSS tomcat6-servlet-2_5-api as a component of SUSE Linux Enterprise Server 11 SP4-LTSS tomcat6-webapps as a component of SUSE Linux Enterprise Server 11 SP4-LTSS tomcat as a component of SUSE Linux Enterprise Server 12 SP2-BCL tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 12 SP2-BCL tomcat-docs-webapp as a component of SUSE Linux Enterprise Server 12 SP2-BCL tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 12 SP2-BCL tomcat-javadoc as a component of SUSE Linux Enterprise Server 12 SP2-BCL tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 12 SP2-BCL tomcat-lib as a component of SUSE Linux Enterprise Server 12 SP2-BCL tomcat-servlet-3_1-api as a component of SUSE Linux Enterprise Server 12 SP2-BCL tomcat-webapps as a component of SUSE Linux Enterprise Server 12 SP2-BCL tomcat as a component of SUSE Linux Enterprise Server 12 SP4 tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 12 SP4 tomcat-docs-webapp as a component of SUSE Linux Enterprise Server 12 SP4 tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 12 SP4 tomcat-javadoc as a component of SUSE Linux Enterprise Server 12 SP4 tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 12 SP4 tomcat-lib as a component of SUSE Linux Enterprise Server 12 SP4 tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server 12 SP4 tomcat-webapps as a component of SUSE Linux Enterprise Server 12 SP4 tomcat as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS tomcat-docs-webapp as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS tomcat-javadoc as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS tomcat-lib as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS tomcat-webapps as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS tomcat as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-docs-webapp as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-javadoc as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-lib as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat-webapps as a component of SUSE Linux Enterprise Server 12 SP4-LTSS tomcat as a component of SUSE Linux Enterprise Server 12 SP5 tomcat-admin-webapps as a component of SUSE Linux Enterprise Server 12 SP5 tomcat-docs-webapp as a component of SUSE Linux Enterprise Server 12 SP5 tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server 12 SP5 tomcat-javadoc as a component of SUSE Linux Enterprise Server 12 SP5 tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server 12 SP5 tomcat-lib as a component of SUSE Linux Enterprise Server 12 SP5 tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server 12 SP5 tomcat-webapps as a component of SUSE Linux Enterprise Server 12 SP5 tomcat as a component of SUSE Linux Enterprise Server Teradata 12 SP3 tomcat as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 tomcat-admin-webapps as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 tomcat-docs-webapp as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 tomcat-el-3_0-api as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 tomcat-javadoc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 tomcat-jsp-2_3-api as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 tomcat-lib as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 tomcat-servlet-4_0-api as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 tomcat-webapps as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 tomcat as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 tomcat as a component of SUSE OpenStack Cloud 8 tomcat-admin-webapps as a component of SUSE OpenStack Cloud 8 tomcat-docs-webapp as a component of SUSE OpenStack Cloud 8 tomcat-el-3_0-api as a component of SUSE OpenStack Cloud 8 tomcat-javadoc as a component of SUSE OpenStack Cloud 8 tomcat-jsp-2_3-api as a component of SUSE OpenStack Cloud 8 tomcat-lib as a component of SUSE OpenStack Cloud 8 tomcat-servlet-3_1-api as a component of SUSE OpenStack Cloud 8 tomcat-webapps as a component of SUSE OpenStack Cloud 8 tomcat as a component of SUSE OpenStack Cloud 9 tomcat-admin-webapps as a component of SUSE OpenStack Cloud 9 tomcat-docs-webapp as a component of SUSE OpenStack Cloud 9 tomcat-el-3_0-api as a component of SUSE OpenStack Cloud 9 tomcat-javadoc as a component of SUSE OpenStack Cloud 9 tomcat-jsp-2_3-api as a component of SUSE OpenStack Cloud 9 tomcat-lib as a component of SUSE OpenStack Cloud 9 tomcat-servlet-4_0-api as a component of SUSE OpenStack Cloud 9 tomcat-webapps as a component of SUSE OpenStack Cloud 9 tomcat as a component of SUSE OpenStack Cloud Crowbar 8 tomcat-admin-webapps as a component of SUSE OpenStack Cloud Crowbar 8 tomcat-docs-webapp as a component of SUSE OpenStack Cloud Crowbar 8 tomcat-el-3_0-api as a component of SUSE OpenStack Cloud Crowbar 8 tomcat-javadoc as a component of SUSE OpenStack Cloud Crowbar 8 tomcat-jsp-2_3-api as a component of SUSE OpenStack Cloud Crowbar 8 tomcat-lib as a component of SUSE OpenStack Cloud Crowbar 8 tomcat-servlet-3_1-api as a component of SUSE OpenStack Cloud Crowbar 8 tomcat-webapps as a component of SUSE OpenStack Cloud Crowbar 8 tomcat as a component of SUSE OpenStack Cloud Crowbar 9 tomcat-admin-webapps as a component of SUSE OpenStack Cloud Crowbar 9 tomcat-docs-webapp as a component of SUSE OpenStack Cloud Crowbar 9 tomcat-el-3_0-api as a component of SUSE OpenStack Cloud Crowbar 9 tomcat-javadoc as a component of SUSE OpenStack Cloud Crowbar 9 tomcat-jsp-2_3-api as a component of SUSE OpenStack Cloud Crowbar 9 tomcat-lib as a component of SUSE OpenStack Cloud Crowbar 9 tomcat-servlet-4_0-api as a component of SUSE OpenStack Cloud Crowbar 9 tomcat-webapps as a component of SUSE OpenStack Cloud Crowbar 9 main/streams/plain_wrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safe_mode_include_dir directive, which allows context-dependent attackers to have an unknown impact by triggering the failure of PHP scripts that perform include or require operations, as demonstrated by a script that attempts to perform a require_once on a file in a standard library directory. NOTE: a reliable third party reports that this is not a vulnerability, because it results in a more restrictive security policy. CVE-2009-3559 SLES for SAP Applications 11 SP3:tomcat6 SUSE Linux Enterprise High Performance Computing 12 SP4:tomcat SUSE Linux Enterprise High Performance Computing 12 SP5:tomcat SUSE Linux Enterprise Server 11 SP1 for Teradata:tomcat6 SUSE Linux Enterprise Server 11 SP1:tomcat6 SUSE Linux Enterprise Server 11 SP3 LTSS:tomcat6 SUSE Linux Enterprise Server 11 SP3 for Teradata:tomcat6 SUSE Linux Enterprise Server 11 SP3:tomcat6 SUSE Linux Enterprise Server 11 SP3:tomcat6-admin-webapps SUSE Linux Enterprise Server 11 SP3:tomcat6-docs-webapp SUSE Linux Enterprise Server 11 SP3:tomcat6-javadoc SUSE Linux Enterprise Server 11 SP3:tomcat6-jsp-2_1-api SUSE Linux Enterprise Server 11 SP3:tomcat6-lib SUSE Linux Enterprise Server 11 SP3:tomcat6-servlet-2_5-api SUSE Linux Enterprise Server 11 SP3:tomcat6-webapps SUSE Linux Enterprise Server 11 SP4 LTSS:tomcat6 SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6 SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-admin-webapps SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-docs-webapp SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-javadoc SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-jsp-2_1-api SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-lib SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-servlet-2_5-api SUSE Linux Enterprise Server 11 SP4-LTSS:tomcat6-webapps SUSE Linux Enterprise Server 12 SP4-ESPOS:tomcat SUSE Linux Enterprise Server 12 SP4-ESPOS:tomcat-admin-webapps SUSE Linux Enterprise Server 12 SP4-ESPOS:tomcat-docs-webapp SUSE Linux Enterprise Server 12 SP4-ESPOS:tomcat-el-3_0-api SUSE Linux Enterprise Server 12 SP4-ESPOS:tomcat-javadoc SUSE Linux Enterprise Server 12 SP4-ESPOS:tomcat-jsp-2_3-api SUSE Linux Enterprise Server 12 SP4-ESPOS:tomcat-lib SUSE Linux Enterprise Server 12 SP4-ESPOS:tomcat-servlet-4_0-api SUSE Linux Enterprise Server 12 SP4-ESPOS:tomcat-webapps SUSE Linux Enterprise Server 12 SP4-LTSS:tomcat SUSE Linux Enterprise Server 12 SP4-LTSS:tomcat-admin-webapps SUSE Linux Enterprise Server 12 SP4-LTSS:tomcat-docs-webapp SUSE Linux Enterprise Server 12 SP4-LTSS:tomcat-el-3_0-api SUSE Linux Enterprise Server 12 SP4-LTSS:tomcat-javadoc SUSE Linux Enterprise Server 12 SP4-LTSS:tomcat-jsp-2_3-api SUSE Linux Enterprise Server 12 SP4-LTSS:tomcat-lib SUSE Linux Enterprise Server 12 SP4-LTSS:tomcat-servlet-4_0-api SUSE Linux Enterprise Server 12 SP4-LTSS:tomcat-webapps SUSE Linux Enterprise Server 12 SP4:tomcat SUSE Linux Enterprise Server 12 SP4:tomcat-admin-webapps SUSE Linux Enterprise Server 12 SP4:tomcat-docs-webapp SUSE Linux Enterprise Server 12 SP4:tomcat-el-3_0-api SUSE Linux Enterprise Server 12 SP4:tomcat-javadoc SUSE Linux Enterprise Server 12 SP4:tomcat-jsp-2_3-api SUSE Linux Enterprise Server 12 SP4:tomcat-lib SUSE Linux Enterprise Server 12 SP4:tomcat-servlet-4_0-api SUSE Linux Enterprise Server 12 SP4:tomcat-webapps SUSE Linux Enterprise Server 12 SP5:tomcat SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api SUSE Linux Enterprise Server 12 SP5:tomcat-javadoc SUSE Linux Enterprise Server 12 SP5:tomcat-jsp-2_3-api SUSE Linux Enterprise Server 12 SP5:tomcat-lib SUSE Linux Enterprise Server 12 SP5:tomcat-servlet-4_0-api SUSE Linux Enterprise Server 12 SP5:tomcat-webapps SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-admin-webapps SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-docs-webapp SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-el-3_0-api SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-javadoc SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-jsp-2_3-api SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-lib SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-servlet-4_0-api SUSE Linux Enterprise Server for SAP Applications 12 SP4:tomcat-webapps SUSE Linux Enterprise Server for SAP Applications 12 SP5:tomcat SUSE OpenStack Cloud 9:tomcat SUSE OpenStack Cloud 9:tomcat-admin-webapps SUSE OpenStack Cloud 9:tomcat-docs-webapp SUSE OpenStack Cloud 9:tomcat-el-3_0-api SUSE OpenStack Cloud 9:tomcat-javadoc SUSE OpenStack Cloud 9:tomcat-jsp-2_3-api SUSE OpenStack Cloud 9:tomcat-lib SUSE OpenStack Cloud 9:tomcat-servlet-4_0-api SUSE OpenStack Cloud 9:tomcat-webapps SUSE OpenStack Cloud Crowbar 9:tomcat SUSE OpenStack Cloud Crowbar 9:tomcat-admin-webapps SUSE OpenStack Cloud Crowbar 9:tomcat-docs-webapp SUSE OpenStack Cloud Crowbar 9:tomcat-el-3_0-api SUSE OpenStack Cloud Crowbar 9:tomcat-javadoc SUSE OpenStack Cloud Crowbar 9:tomcat-jsp-2_3-api SUSE OpenStack Cloud Crowbar 9:tomcat-lib SUSE OpenStack Cloud Crowbar 9:tomcat-servlet-4_0-api SUSE OpenStack Cloud Crowbar 9:tomcat-webapps important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P