Lucene search

K
prionPRIOn knowledge basePRION:CVE-2014-3981
HistoryJun 08, 2014 - 6:55 p.m.

Code injection

2014-06-0818:55:00
PRIOn knowledge base
www.prio-n.com
2

6.6 Medium

AI Score

Confidence

Low

3.3 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

0.0005 Low

EPSS

Percentile

14.4%

acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file.

CPENameOperatorVersion
phpge5.5.0
phplt5.5.14
phpge5.4.0
phplt5.4.30
phplt5.3.29

6.6 Medium

AI Score

Confidence

Low

3.3 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

0.0005 Low

EPSS

Percentile

14.4%