CVE-2015-4025

2015-06-0918:59:00

CWE-19

[email protected]

web.nvd.nist.gov

125

cve-2015-4025

php

remote attack

pathname truncation

extension restrictions

8.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.021 Low

EPSS

Percentile

89.1%

JSON

PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations, which allows remote attackers to bypass intended extension restrictions and access files or directories with unexpected names via a crafted argument to (1) set_include_path, (2) tempnam, (3) rmdir, or (4) readlink. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.

CPENameOperatorVersion
apple:mac_os_xapple mac os xle10.10.4
php:phpphpeq5.5.0
php:phpphpeq5.6.0
php:phpphpeq5.6.5
php:phpphpeq5.5.19
php:phpphple5.4.40
php:phpphpeq5.5.1
php:phpphpeq5.5.5
php:phpphpeq5.6.4
php:phpphpeq5.5.21

CPE	Name	Operator	Version
apple:mac_os_x	apple mac os x	le	10.10.4
php:php	php	eq	5.5.0
php:php	php	eq	5.6.0
php:php	php	eq	5.6.5
php:php	php	eq	5.5.19
php:php	php	le	5.4.40
php:php	php	eq	5.5.1
php:php	php	eq	5.5.5
php:php	php	eq	5.6.4
php:php	php	eq	5.5.21