ByteOS Network

CVE Vulnerability Details :

CVE-2015-4025

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-09 Jun, 2015 | 18:00

Updated At-06 Aug, 2024 | 06:04

▼CVE Numbering Authority (CNA)

PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations, which allows remote attackers to bypass intended extension restrictions and access files or directories with unexpected names via a crafted argument to (1) set_include_path, (2) tempnam, (3) rmdir, or (4) readlink. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://rhn.redhat.com/errata/RHSA-2015-1187.html	vendor-advisory x_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2015-1186.html	vendor-advisory x_refsource_REDHAT
https://bugs.php.net/bug.php?id=69418	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1219.html	vendor-advisory x_refsource_REDHAT
http://www.securityfocus.com/bid/74904	vdb-entry x_refsource_BID
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM
http://www.debian.org/security/2015/dsa-3280	vendor-advisory x_refsource_DEBIAN
http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html	vendor-advisory x_refsource_APPLE
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisory x_refsource_REDHAT
http://www.securitytracker.com/id/1032431	vdb-entry x_refsource_SECTRACK
https://support.apple.com/kb/HT205031	x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html	vendor-advisory x_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html	vendor-advisory x_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html	vendor-advisory x_refsource_FEDORA
https://security.gentoo.org/glsa/201606-10	vendor-advisory x_refsource_GENTOO

Hyperlink: http://rhn.redhat.com/errata/RHSA-2015-1187.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://rhn.redhat.com/errata/RHSA-2015-1186.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://bugs.php.net/bug.php?id=69418

Resource:

x_refsource_CONFIRM

Hyperlink: http://rhn.redhat.com/errata/RHSA-2015-1219.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.securityfocus.com/bid/74904

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://php.net/ChangeLog-5.php

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.debian.org/security/2015/dsa-3280

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://rhn.redhat.com/errata/RHSA-2015-1135.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.securitytracker.com/id/1032431

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://support.apple.com/kb/HT205031

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: https://security.gentoo.org/glsa/201606-10

Resource:

vendor-advisory

x_refsource_GENTOO

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://rhn.redhat.com/errata/RHSA-2015-1187.html	vendor-advisory x_refsource_REDHAT x_transferred
http://rhn.redhat.com/errata/RHSA-2015-1186.html	vendor-advisory x_refsource_REDHAT x_transferred
https://bugs.php.net/bug.php?id=69418	x_refsource_CONFIRM x_transferred
http://rhn.redhat.com/errata/RHSA-2015-1219.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.securityfocus.com/bid/74904	vdb-entry x_refsource_BID x_transferred
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x_refsource_CONFIRM x_transferred
http://php.net/ChangeLog-5.php	x_refsource_CONFIRM x_transferred
http://www.debian.org/security/2015/dsa-3280	vendor-advisory x_refsource_DEBIAN x_transferred
http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html	vendor-advisory x_refsource_APPLE x_transferred
http://rhn.redhat.com/errata/RHSA-2015-1135.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.securitytracker.com/id/1032431	vdb-entry x_refsource_SECTRACK x_transferred
https://support.apple.com/kb/HT205031	x_refsource_CONFIRM x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html	vendor-advisory x_refsource_FEDORA x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html	vendor-advisory x_refsource_FEDORA x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html	vendor-advisory x_refsource_FEDORA x_transferred
https://security.gentoo.org/glsa/201606-10	vendor-advisory x_refsource_GENTOO x_transferred