Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2014-5459

Опубликовано: 27 сент. 2014
Источник: nvd
CVSS2: 3.6
EPSS Низкий

Описание

The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Версия до 5.6.0 (включая)
Конфигурация 2
cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:o:opensuse:evergreen:11.4:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

EPSS

Процентиль: 33%
0.00128
Низкий

3.6 Low

CVSS2

Дефекты

CWE-59

Связанные уязвимости

ubuntu
почти 11 лет назад

The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions.

redhat
почти 11 лет назад

The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions.

debian
почти 11 лет назад

The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows lo ...

github
около 3 лет назад

The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions.

suse-cvrf
почти 11 лет назад

Security update for php53

EPSS

Процентиль: 33%
0.00128
Низкий

3.6 Low

CVSS2

Дефекты

CWE-59