Lucene search
Ubuntu.comUB:CVE-2013-1635HistoryMar 06, 2013 - 12:00 a.m.
CVE-2013-1635
2013-03-0600:00:00
ubuntu.com
ubuntu.com
8
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.018 Low
EPSS
Percentile
87.9%
ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not
validate the relationship between the soap.wsdl_cache_dir directive and the
open_basedir directive, which allows remote attackers to bypass intended
access restrictions by triggering the creation of cached SOAP WSDL files in
an arbitrary directory.
Bugs
Notes
| Author | Note |
|---|---|
| mdeslaur | we do not support the use of open_basedir, marking as ignored |
Related
prion
prion
Directory traversal
2013-03-06 13:10:00
cve
cve
CVE-2013-1635
2013-03-06 13:10:00
f5
f5
SOL14432 - PHP SOAP wdsl cache file vulnerability CVE-2013-1635
2013-05-30 00:00:00
K14432 : PHP SOAP wdsl cache file vulnerability CVE-2013-1635
2013-09-23 00:00:00
ptsecurity
ptsecurity
PT-2013-12: open_basedir bypass in PHP
2013-03-14 00:00:00
nessus
nessus
PHP 5.4.x < 5.4.12 Multiple Vulnerabilities
2013-03-04 00:00:00
Mandriva Linux Security Advisory : php (MDVSA-2013:114)
2013-04-20 00:00:00
Mandriva Linux Security Advisory : php (MDVSA-2013:016)
2013-03-01 00:00:00
openvas
openvas
Fedora Update for php FEDORA-2013-3891
2013-04-05 00:00:00
Fedora Update for php FEDORA-2013-10255
2013-06-24 00:00:00
Slackware: Security Advisory (SSA:2013-081-01)
2022-04-21 00:00:00
debian
debian
[SECURITY] [DSA 2639-1] php5 security update
2013-03-05 17:22:41
securityvulns
securityvulns
PHP securiy vulnerabilities
2013-03-02 00:00:00
[ MDVSA-2013:016 ] php
2013-03-02 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: php-5.4.16-1.fc18
2013-06-20 02:31:36
[SECURITY] Fedora 18 Update: php-5.4.13-1.fc18
2013-04-03 04:40:40
[SECURITY] Fedora 18 Update: php-5.4.17-2.fc18
2013-07-23 01:15:46
slackware
slackware
php
2013-03-23 20:35:59
freebsd
freebsd
php5 -- Multiple vulnerabilities
2013-03-04 00:00:00
osv
osv
php5 - several vulnerabilities
2013-03-05 00:00:00
suse
suse
Security update for PHP5 (important)
2013-08-01 00:04:12
Security update for PHP5 (important)
2013-08-09 23:04:20
Security update for PHP5 (important)
2013-08-09 23:04:16
hackerone
hackerone
Yahoo!: Out of date version
2014-03-30 08:47:50
gentoo
gentoo
PHP: Multiple vulnerabilities
2014-08-29 00:00:00
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.018 Low
EPSS
Percentile
87.9%
Related for UB:CVE-2013-1635