CVE-2015-4026

2015-06-0918:59:00

CWE-19

[email protected]

web.nvd.nist.gov

122

cve-2015-4026

php

pcntl_exec

pathname truncation

remote code execution

cve-2006-7243

8.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.04 Low

EPSS

Percentile

92.0%

JSON

The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character, which might allow remote attackers to bypass intended extension restrictions and execute files with unexpected names via a crafted first argument. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.

CPENameOperatorVersion
redhat:enterprise_linuxredhat enterprise linuxeq7.0
redhat:enterprise_linuxredhat enterprise linuxeq6.0
php:phpphpeq5.5.0
php:phpphpeq5.6.0
php:phpphpeq5.6.5
php:phpphpeq5.5.19
php:phpphple5.4.40
php:phpphpeq5.5.1
php:phpphpeq5.5.5
php:phpphpeq5.6.4

CPE	Name	Operator	Version
redhat:enterprise_linux	redhat enterprise linux	eq	7.0
redhat:enterprise_linux	redhat enterprise linux	eq	6.0
php:php	php	eq	5.5.0
php:php	php	eq	5.6.0
php:php	php	eq	5.6.5
php:php	php	eq	5.5.19
php:php	php	le	5.4.40
php:php	php	eq	5.5.1
php:php	php	eq	5.5.5
php:php	php	eq	5.6.4