CVE-2014-5459 in PHP
Summary
The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
08/26/2014
Disclosure
09/27/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 71567 | PHP Cache REST.php link following | 59 | Not defined | Not defined | CVE-2014-5459 |