NVD

Id
29100  
Name
CVE-2014-0185  
Description
sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-05-06  
Modified Date
2017-01-06  
Seq
2014-0185  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
153810 29100 CVE-2014-0185 openSUSE-SU-2015:1685  View
153811 29100 CVE-2014-0185 59061  View
153812 29100 CVE-2014-0185 59329  View
153813 29100 CVE-2014-0185 http://support.apple.com/kb/HT6443  View
153814 29100 CVE-2014-0185 [oss-security] 20140429 Fwd: [vs] php-fpm: privilege escalation due to insecure default config (CVE-2014-0185)  View
153815 29100 CVE-2014-0185 http://www.php.net/archive/2014.php#id2014-05-01-1  View
153816 29100 CVE-2014-0185 http://www.php.net/ChangeLog-5.php  View
153817 29100 CVE-2014-0185 https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1307027  View
153818 29100 CVE-2014-0185 https://bugs.php.net/bug.php?id=67060  View
153819 29100 CVE-2014-0185 https://bugzilla.redhat.com/show_bug.cgi?id=1092815  View
153820 29100 CVE-2014-0185 https://github.com/php/php-src/commit/35ceea928b12373a3b1e3eecdc32ed323223a40d  View
153821 29100 CVE-2014-0185 https://hoffmann-christian.info/files/php-fpm/0001-Fix-bug-67060-use-default-mode-of-660.patch  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13516 JVNDB-2014-002391 PHP の FastCGI Process Manager の sapi/fpm/fpm/fpm_unix.c における権限を取得される脆弱性 PHP の FastCGI Process Manager (FPM) の sapi/fpm/fpm/fpm_unix.c は、UNIX のソケットに対して 0666 パーミッションを使用するため、権限を取得される脆弱性が存在します。 CVE-2014-0185 67586 CVE-2014-0185 29100 7.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002391.html 2014-05-01 2014-09-24 View