CVE

Id
79625  
CVE No.
CVE-2015-2348  
Status
Candidate  
Description
The move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 truncates a pathname upon encountering a x00 character, which allows remote attackers to bypass intended extension restrictions and create files with unexpected names via a crafted second argument. NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-7243.  
Phase
Assigned (20150319)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
722749 79625 CVE-2015-2348 CONFIRM:http://git.php.net/?p=php-src.git;a=commit;h=1291d6bbee93b6109eb07e8f7916ff1b7fcc13e1  View
722750 79625 CVE-2015-2348 CONFIRM:http://php.net/ChangeLog-5.php  View
722751 79625 CVE-2015-2348 CONFIRM:https://bugs.php.net/bug.php?id=69207  View
722752 79625 CVE-2015-2348 CONFIRM:https://support.apple.com/HT205267  View
722753 79625 CVE-2015-2348 CONFIRM:http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
722754 79625 CVE-2015-2348 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html  View
722755 79625 CVE-2015-2348 APPLE:APPLE-SA-2015-09-30-3  View
722756 79625 CVE-2015-2348 URL:http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html  View
722757 79625 CVE-2015-2348 GENTOO:GLSA-201606-10  View
722758 79625 CVE-2015-2348 URL:https://security.gentoo.org/glsa/201606-10  View
722759 79625 CVE-2015-2348 HP:HPSBMU03380  View
722760 79625 CVE-2015-2348 URL:http://marc.info/?l=bugtraq&m=143748090628601&w=2  View
722761 79625 CVE-2015-2348 HP:HPSBMU03409  View
722762 79625 CVE-2015-2348 URL:http://marc.info/?l=bugtraq&m=144050155601375&w=2  View
722763 79625 CVE-2015-2348 REDHAT:RHSA-2015:1135  View
722764 79625 CVE-2015-2348 URL:http://rhn.redhat.com/errata/RHSA-2015-1135.html  View
722765 79625 CVE-2015-2348 REDHAT:RHSA-2015:1053  View
722766 79625 CVE-2015-2348 URL:http://rhn.redhat.com/errata/RHSA-2015-1053.html  View
722767 79625 CVE-2015-2348 REDHAT:RHSA-2015:1066  View
722768 79625 CVE-2015-2348 URL:http://rhn.redhat.com/errata/RHSA-2015-1066.html  View
722769 79625 CVE-2015-2348 SUSE:openSUSE-SU-2015:0684  View
722770 79625 CVE-2015-2348 URL:http://lists.opensuse.org/opensuse-updates/2015-04/msg00015.html  View
722771 79625 CVE-2015-2348 SUSE:SUSE-SU-2015:0868  View
722772 79625 CVE-2015-2348 URL:http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html  View
722773 79625 CVE-2015-2348 UBUNTU:USN-2572-1  View
722774 79625 CVE-2015-2348 URL:http://www.ubuntu.com/usn/USN-2572-1  View
722775 79625 CVE-2015-2348 BID:73434  View
722776 79625 CVE-2015-2348 URL:http://www.securityfocus.com/bid/73434  View
722777 79625 CVE-2015-2348 SECTRACK:1032484  View

Related JVN