CVE-2014-5459

🗓️ 27 Sep 2014 10:00:00Reported by mitreType

The PEAR_REST class in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack

Reporter	Title	Published	Views	Family All 54
IBM Security Bulletins	Security Bulletin: Network Intrusion Prevention System is affected by multiple D-BUS and PHP vulnerabilities (CVE-2014-3638, CVE-2014-3639, CVE-2014-3477, CVE-2014-5459, CVE-2014-3597, CVE-2014-4721)	23 Feb 202219:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in php affect IBM Flex System Manager (FSM): (CVE-2014-3597, CVE-2014-4721 and CVE-2014-5459)	31 Jan 201901:45	–	ibm
Cvelist	CVE-2014-5459	27 Sep 201410:00	–	cvelist
EUVD	EUVD-2014-5346	7 Oct 202500:30	–	euvd
F5 Networks	K17212: PHP vulnerability CVE-2014-5459	21 Feb 202318:08	–	f5
F5 Networks	SOL17212 - PHP vulnerability CVE-2014-5459	1 Sep 201500:00	–	f5
Hacker One	Gratipay: PHP 5.4.45 is Outdated and Full of Preformance Interupting Arbitrary Code Execution Bugs	16 Apr 201622:49	–	hackerone
NVD	CVE-2014-5459	27 Sep 201410:55	–	nvd
Tenable Nessus	openSUSE Security Update : php5 (openSUSE-SU-2014:1133-1)	17 Sep 201400:00	–	nessus
Tenable Nessus	SuSE 11.3 Security Update : php53 (SAT Patch Number 9718)	18 Sep 201400:00	–	nessus

NVD

Node

php phpRange≤5.6.0

Node

Node

Source	Link
openwall	www.openwall.com/lists/oss-security/2014/08/27/3
bugs	www.bugs.debian.org/cgi-bin/bugreport.cgi
lists	www.lists.opensuse.org/opensuse-updates/2014-09/msg00024.html
oracle	www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
lists	www.lists.opensuse.org/opensuse-updates/2014-09/msg00055.html

06 May 2026 22:30Current

8.6High risk

Vulners AI Score8.6

CVSS 23.6

EPSS0.00077