CVE-2009-3559

CVE-2009-3559 affects PHP 5.3.x versions prior to 5.3.1, where a flaw in main/streams/plain_wrapper.c prevents the recognition of the safe_mode_include_dir directive. This oversight can lead to PHP scripts failing when performing include or require operations, potentially causing an unknown impact. The vulnerability has a CVSS score of 7.5, indicating high severity with network-based attacks, low complexity, and potential for partial confidentiality, integrity, and availability impacts. Despite its severity, there is no evidence of active exploitation, public exploit code, or significant community discussion, and a reliable third party suggests it might not be a vulnerability as it enforces a more restrictive security policy.