Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2014-0185
Modified
More InfoOfficial Page
Source-secalert@redhat.com
View Known Exploited Vulnerability (KEV) details
Published At-06 May, 2014 | 10:44
Updated At-06 May, 2026 | 22:30

sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.07.2HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
Type: Primary
Version: 2.0
Base score: 7.2
Base severity: HIGH
Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
CPE Matches
The PHP Group
php
>>php>>Versions from 5.3.0(inclusive) to 5.3.28(exclusive)
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
The PHP Group
php
>>php>>Versions from 5.4.0(inclusive) to 5.4.28(exclusive)
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
The PHP Group
php
>>php>>Versions from 5.5.0(inclusive) to 5.5.12(exclusive)
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-269Primarynvd@nist.gov
CWE ID: CWE-269
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://lists.opensuse.org/opensuse-updates/2015-10/msg00012.htmlsecalert@redhat.com
Mailing List
Third Party Advisory
http://secunia.com/advisories/59061secalert@redhat.com
Third Party Advisory
http://secunia.com/advisories/59329secalert@redhat.com
Third Party Advisory
http://support.apple.com/kb/HT6443secalert@redhat.com
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/04/29/5secalert@redhat.com
Mailing List
Third Party Advisory
http://www.php.net/ChangeLog-5.phpsecalert@redhat.com
Vendor Advisory
http://www.php.net/archive/2014.php#id2014-05-01-1secalert@redhat.com
Vendor Advisory
https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1307027secalert@redhat.com
Third Party Advisory
https://bugs.php.net/bug.php?id=67060secalert@redhat.com
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1092815secalert@redhat.com
Issue Tracking
Third Party Advisory
https://github.com/php/php-src/commit/35ceea928b12373a3b1e3eecdc32ed323223a40dsecalert@redhat.com
Exploit
Patch
Third Party Advisory
https://hoffmann-christian.info/files/php-fpm/0001-Fix-bug-67060-use-default-mode-of-660.patchsecalert@redhat.com
Patch
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-10/msg00012.htmlaf854a3a-2127-422b-91ae-364da2661108
Mailing List
Third Party Advisory
http://secunia.com/advisories/59061af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://secunia.com/advisories/59329af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://support.apple.com/kb/HT6443af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/04/29/5af854a3a-2127-422b-91ae-364da2661108
Mailing List
Third Party Advisory
http://www.php.net/ChangeLog-5.phpaf854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.php.net/archive/2014.php#id2014-05-01-1af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1307027af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
https://bugs.php.net/bug.php?id=67060af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1092815af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Third Party Advisory
https://github.com/php/php-src/commit/35ceea928b12373a3b1e3eecdc32ed323223a40daf854a3a-2127-422b-91ae-364da2661108
Exploit
Patch
Third Party Advisory
https://hoffmann-christian.info/files/php-fpm/0001-Fix-bug-67060-use-default-mode-of-660.patchaf854a3a-2127-422b-91ae-364da2661108
Patch
Third Party Advisory
Hyperlink: http://lists.opensuse.org/opensuse-updates/2015-10/msg00012.html
Source: secalert@redhat.com
Resource:
Mailing List
Third Party Advisory
Hyperlink: http://secunia.com/advisories/59061
Source: secalert@redhat.com
Resource:
Third Party Advisory
Hyperlink: http://secunia.com/advisories/59329
Source: secalert@redhat.com
Resource:
Third Party Advisory
Hyperlink: http://support.apple.com/kb/HT6443
Source: secalert@redhat.com
Resource:
Third Party Advisory
Hyperlink: http://www.openwall.com/lists/oss-security/2014/04/29/5
Source: secalert@redhat.com
Resource:
Mailing List
Third Party Advisory
Hyperlink: http://www.php.net/ChangeLog-5.php
Source: secalert@redhat.com
Resource:
Vendor Advisory
Hyperlink: http://www.php.net/archive/2014.php#id2014-05-01-1
Source: secalert@redhat.com
Resource:
Vendor Advisory
Hyperlink: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1307027
Source: secalert@redhat.com
Resource:
Third Party Advisory
Hyperlink: https://bugs.php.net/bug.php?id=67060
Source: secalert@redhat.com
Resource:
Vendor Advisory
Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1092815
Source: secalert@redhat.com
Resource:
Issue Tracking
Third Party Advisory
Hyperlink: https://github.com/php/php-src/commit/35ceea928b12373a3b1e3eecdc32ed323223a40d
Source: secalert@redhat.com
Resource:
Exploit
Patch
Third Party Advisory
Hyperlink: https://hoffmann-christian.info/files/php-fpm/0001-Fix-bug-67060-use-default-mode-of-660.patch
Source: secalert@redhat.com
Resource:
Patch
Third Party Advisory
Hyperlink: http://lists.opensuse.org/opensuse-updates/2015-10/msg00012.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Mailing List
Third Party Advisory
Hyperlink: http://secunia.com/advisories/59061
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: http://secunia.com/advisories/59329
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: http://support.apple.com/kb/HT6443
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: http://www.openwall.com/lists/oss-security/2014/04/29/5
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Mailing List
Third Party Advisory
Hyperlink: http://www.php.net/ChangeLog-5.php
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://www.php.net/archive/2014.php#id2014-05-01-1
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1307027
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Third Party Advisory
Hyperlink: https://bugs.php.net/bug.php?id=67060
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1092815
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Issue Tracking
Third Party Advisory
Hyperlink: https://github.com/php/php-src/commit/35ceea928b12373a3b1e3eecdc32ed323223a40d
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Patch
Third Party Advisory
Hyperlink: https://hoffmann-christian.info/files/php-fpm/0001-Fix-bug-67060-use-default-mode-of-660.patch
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Third Party Advisory
Change History
0Changes found
Details not found