Lucene search
F5F5:K14432HistorySep 23, 2013 - 12:00 a.m.
K14432 : PHP SOAP wdsl cache file vulnerability CVE-2013-1635
2013-09-2300:00:00
my.f5.com
12
6.2 Medium
AI Score
Confidence
Low
Security Advisory Description
PHP does not validate the configuration directive soap.wsdl_cache_dir before writing SOAP wsdl cache files to the filesystem.
Impact
An attacker is able to write remote wsdl files to arbitrary locations on an affected system.
Related
ubuntucve
ubuntucve
CVE-2013-1635
2013-03-06 00:00:00
prion
prion
Directory traversal
2013-03-06 13:10:00
cve
cve
CVE-2013-1635
2013-03-06 13:10:00
f5
f5
SOL14432 - PHP SOAP wdsl cache file vulnerability CVE-2013-1635
2013-05-30 00:00:00
ptsecurity
ptsecurity
PT-2013-12: open_basedir bypass in PHP
2013-03-14 00:00:00
nessus
nessus
PHP 5.4.x < 5.4.12 Multiple Vulnerabilities
2013-03-04 00:00:00
Mandriva Linux Security Advisory : php (MDVSA-2013:114)
2013-04-20 00:00:00
PHP 5.3.x < 5.3.22 Multiple Vulnerabilities
2013-03-04 00:00:00
openvas
openvas
Fedora Update for php FEDORA-2013-3891
2013-04-05 00:00:00
Fedora Update for php FEDORA-2013-10255
2013-06-24 00:00:00
Slackware: Security Advisory (SSA:2013-081-01)
2022-04-21 00:00:00
debian
debian
[SECURITY] [DSA 2639-1] php5 security update
2013-03-05 17:22:41
securityvulns
securityvulns
PHP securiy vulnerabilities
2013-03-02 00:00:00
[ MDVSA-2013:016 ] php
2013-03-02 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: php-5.4.16-1.fc18
2013-06-20 02:31:36
[SECURITY] Fedora 18 Update: php-5.4.13-1.fc18
2013-04-03 04:40:40
[SECURITY] Fedora 18 Update: php-5.4.17-2.fc18
2013-07-23 01:15:46
slackware
slackware
php
2013-03-23 20:35:59
freebsd
freebsd
php5 -- Multiple vulnerabilities
2013-03-04 00:00:00
osv
osv
php5 - several vulnerabilities
2013-03-05 00:00:00
suse
suse
Security update for PHP5 (important)
2013-08-01 00:04:12
Security update for PHP5 (important)
2013-08-09 23:04:20
Security update for PHP5 (important)
2013-08-09 23:04:16
hackerone
hackerone
Yahoo!: Out of date version
2014-03-30 08:47:50
gentoo
gentoo
PHP: Multiple vulnerabilities
2014-08-29 00:00:00