CVE-2014-5459 in PHP
摘要 (英语)
The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions.
预定
2014-08-26
披露
2014-09-27
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 71567 | PHP Cache REST.php 权限提升 | 59 | 未定义 | 未定义 | CVE-2014-5459 |