PT-2014-6489 · Php+1 · Pear+2

Vladz · Publicado 2014-09-27 · Atualizado 2024-06-15 · CVE-2014-5459

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.0 PEAR (affected versions not specified)

Description The issue allows local users to write to arbitrary files via a symlink attack on a rest.cachefile or rest.cacheid file in /tmp/pear/cache. This is related to the retrieveCacheFirst and useLocalCache functions in the PEAR REST class in REST.php.

Recommendations For PHP versions prior to 5.6.0, consider updating to a version that is not affected by this issue. As a temporary workaround, consider restricting access to the /tmp/pear/cache/ directory to minimize the risk of exploitation. Avoid using the retrieveCacheFirst and useLocalCache functions in the PEAR REST class until the issue is resolved.

Exploit

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2014-5459

OPENSUSE-SU-2024:10290-1

OPENSUSE-SU-2024:10344-1

OPENSUSE-SU-2024:11169-1

SUSE-SU-2016:1638-1

Produtos afetados

Pear

Php

Suse

Referências · 273

• 🔥 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759282 · Exploit
• https://bugzilla.suse.com/982010 · Nota
• https://suse.com/security/cve/CVE-2012-3365 · Nota
• https://bugzilla.suse.com/884990 · Nota
• https://suse.com/security/cve/CVE-2010-3710 · Nota
• https://suse.com/security/cve/CVE-2012-2336 · Nota
• https://suse.com/security/cve/CVE-2019-11039 · Nota
• https://suse.com/security/cve/CVE-2011-3379 · Nota
• https://bugzilla.suse.com/982162 · Nota
• https://bugzilla.suse.com/980366 · Nota
• https://bugzilla.suse.com/931776 · Nota
• https://suse.com/security/cve/CVE-2015-3416 · Nota
• https://bugzilla.suse.com/945428 · Nota
• https://suse.com/security/cve/CVE-2018-12882 · Nota
• https://ubuntu.com/security/CVE-2014-5459 · Aviso do Fabricante