Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-5385

Опубликовано: 19 июл. 2016
Источник: nvd
CVSS3: 8.1
CVSS2: 5.1
EPSS Средний

Описание

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:communications_user_data_repository:10.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_user_data_repository:10.0.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_user_data_repository:12.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.2.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.2:*:*:*:*:*:*:*
cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:*
cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*
Конфигурация 3

Одновременно

cpe:2.3:o:hp:storeever_msl6480_tape_library_firmware:*:*:*:*:*:*:*:*
Версия до 5.09 (включая)
cpe:2.3:h:hp:storeever_msl6480_tape_library:-:*:*:*:*:*:*:*
Конфигурация 4
cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*
Версия до 7.5.5.0 (включая)
Конфигурация 5

Одно из

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Версия от 5.5.0 (включая) до 5.5.38 (исключая)
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Версия от 5.6.0 (включая) до 5.6.24 (исключая)
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Версия от 7.0.0 (включая) до 7.0.8 (включая)
Конфигурация 6

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
Конфигурация 7
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Конфигурация 8
cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
Конфигурация 9
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*
Версия от 8.0.0 (включая) до 8.1.7 (исключая)

EPSS

Процентиль: 99%
0.50427
Средний

8.1 High

CVSS3

5.1 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

ubuntu логотип

CVE-2016-5385

CVSS3: 8.1
ubuntu
около 10 лет назад

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue.

redhat логотип

CVE-2016-5385

CVSS3: 5
redhat
около 10 лет назад

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue.

debian логотип

CVE-2016-5385

CVSS3: 8.1
debian
около 10 лет назад

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 ...

oracle-oval логотип

ELSA-2016-1613

oracle-oval
почти 10 лет назад

ELSA-2016-1613: php security and bug fix update (MODERATE)

oracle-oval логотип

ELSA-2016-1609

oracle-oval
почти 10 лет назад

ELSA-2016-1609: php security update (MODERATE)

EPSS

Процентиль: 99%
0.50427
Средний

8.1 High

CVSS3

5.1 Medium

CVSS2

Дефекты

CWE-601