PT-2015-3434 · Php+1 · Php+1

Michael Scherer · Published 2015-03-05 · Updated 2016-11-30 · CVE-2013-6501

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.7

Description The issue exists due to the failure to neutralize special elements in the get sdl function of the PHP interpreter. Exploitation of this issue may allow an attacker to disclose protected information, impact data integrity, or cause a denial of service. The default configuration of the soap.wsdl cache dir setting in PHP's configuration files specifies the /tmp directory, which facilitates local users' ability to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get sdl function.

Recommendations For PHP versions prior to 5.6.7, consider updating the soap.wsdl cache dir setting to a directory that is not accessible by local users to minimize the risk of WSDL injection attacks. As a temporary workaround, consider restricting access to the get sdl function in ext/soap/php sdl.c until a patch is available.

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

BDU:2022-02642

CVE-2013-6501

SUSE-SU-2015_0436-1

Affected Products

Php

Suse

References · 24

• https://osv.dev/vulnerability/UBUNTU-CVE-2013-6501 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2013-6501 · Security Note
• https://bdu.fstec.ru/vul/2015-09882 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9652 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2013-6501 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6501 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html · Vendor Advisory
• https://security.gentoo.org/glsa/201606-10 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09850 · Security Note
• https://bdu.fstec.ru/vul/2022-02642 · Security Note
• https://ubuntu.com/security/CVE-2013-6501 · Vendor Advisory
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Note
• https://bugzilla.suse.com/917150 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1009103 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6501 · Note