QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2015-4025

Back to search

CVE-2015-4025

Published: Jun 9, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations, which allows remote attackers to bypass intended extension restrictions and access files or directories with unexpected names via a crafted argument to (1) set_include_path, (2) tempnam, (3) rmdir, or (4) readlink. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.

VendorProductVersions

n/a

n/a

affected
n/a

References

RHSA-2015:1187
vendor-advisory
x_refsource_REDHAT
RHSA-2015:1186
vendor-advisory
x_refsource_REDHAT
RHSA-2015:1219
vendor-advisory
x_refsource_REDHAT
74904
vdb-entry
x_refsource_BID
DSA-3280
vendor-advisory
x_refsource_DEBIAN
APPLE-SA-2015-08-13-2
vendor-advisory
x_refsource_APPLE
RHSA-2015:1135
vendor-advisory
x_refsource_REDHAT
1032431
vdb-entry
x_refsource_SECTRACK
FEDORA-2015-8383
vendor-advisory
x_refsource_FEDORA
FEDORA-2015-8281
vendor-advisory
x_refsource_FEDORA
FEDORA-2015-8370
vendor-advisory
x_refsource_FEDORA
GLSA-201606-10
vendor-advisory
x_refsource_GENTOO

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now