Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-5385

Опубликовано: 19 июл. 2016
Источник: nvd
CVSS3: 8.1
CVSS2: 5.1
EPSS Высокий

Описание

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:communications_user_data_repository:10.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_user_data_repository:10.0.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_user_data_repository:12.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.2.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.2:*:*:*:*:*:*:*
cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*
cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*
Конфигурация 3

Одновременно

cpe:2.3:o:hp:storeever_msl6480_tape_library_firmware:*:*:*:*:*:*:*:*
Версия до 5.09 (включая)
cpe:2.3:h:hp:storeever_msl6480_tape_library:-:*:*:*:*:*:*:*
Конфигурация 4
cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*
Версия до 7.5.5.0 (включая)
Конфигурация 5

Одно из

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Версия от 5.5.0 (включая) до 5.5.38 (исключая)
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Версия от 5.6.0 (включая) до 5.6.24 (исключая)
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Версия от 7.0.0 (включая) до 7.0.8 (включая)
Конфигурация 6

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
Конфигурация 7
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Конфигурация 8
cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
Конфигурация 9
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*
Версия от 8.0.0 (включая) до 8.1.7 (исключая)

EPSS

Процентиль: 99%
0.79886
Высокий

8.1 High

CVSS3

5.1 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

ubuntu логотип

CVE-2016-5385

CVSS3: 8.1
ubuntu
почти 9 лет назад

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue.

redhat логотип

CVE-2016-5385

CVSS3: 5
redhat
почти 9 лет назад

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue.

debian логотип

CVE-2016-5385

CVSS3: 8.1
debian
почти 9 лет назад

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 ...

oracle-oval логотип

ELSA-2016-1613

oracle-oval
почти 9 лет назад

ELSA-2016-1613: php security and bug fix update (MODERATE)

oracle-oval логотип

ELSA-2016-1609

oracle-oval
почти 9 лет назад

ELSA-2016-1609: php security update (MODERATE)

EPSS

Процентиль: 99%
0.79886
Высокий

8.1 High

CVSS3

5.1 Medium

CVSS2

Дефекты

CWE-601