PT-2015-3434 · Php+1 · Php+1
Michael Scherer
·
Publicado
2015-03-05
·
Atualizado
2016-11-30
·
CVE-2013-6501
CVSS v2.0
4.6
Média
| Vetor | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
PHP versions prior to 5.6.7
Description
The issue exists due to the failure to neutralize special elements in the get sdl function of the PHP interpreter. Exploitation of this issue may allow an attacker to disclose protected information, impact data integrity, or cause a denial of service. The default configuration of the soap.wsdl cache dir setting in PHP's configuration files specifies the /tmp directory, which facilitates local users' ability to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the
get sdl function.Recommendations
For PHP versions prior to 5.6.7, consider updating the soap.wsdl cache dir setting to a directory that is not accessible by local users to minimize the risk of WSDL injection attacks.
As a temporary workaround, consider restricting access to the
get sdl function in ext/soap/php sdl.c until a patch is available.Correção
Special Elements Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Php
Suse