CVE-2014-5459 in PHP
Resumen (Inglés)
The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions.
Reservar
2014-08-26
Divulgación
2014-09-27
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 71567 | PHP Cache REST.php escalada de privilegios | 59 | No está definido | No está definido | CVE-2014-5459 |