QwikSec

Security Database

CVE

CWE

Training

CVE-2015-4026

Published: Jun 9, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character, which might allow remote attackers to bypass intended extension restrictions and execute files with unexpected names via a crafted first argument. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_REDHAT

vendor-advisory

x_refsource_REDHAT

http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html

x_refsource_CONFIRM

https://bugs.php.net/bug.php?id=68598

x_refsource_CONFIRM

openSUSE-SU-2015:0993

vendor-advisory

x_refsource_SUSE

http://php.net/ChangeLog-5.php

x_refsource_CONFIRM

vendor-advisory

x_refsource_DEBIAN

APPLE-SA-2015-08-13-2

vendor-advisory

x_refsource_APPLE

vendor-advisory

x_refsource_REDHAT

vdb-entry

x_refsource_SECTRACK

https://support.apple.com/kb/HT205031

x_refsource_CONFIRM

FEDORA-2015-8383

vendor-advisory

x_refsource_FEDORA

vdb-entry

x_refsource_BID

FEDORA-2015-8281

vendor-advisory

x_refsource_FEDORA

FEDORA-2015-8370

vendor-advisory

x_refsource_FEDORA

vendor-advisory

x_refsource_GENTOO

vendor-advisory

x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.