NVD

Id
32053  
Name
CVE-2014-3981  
Description
acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file.  
Reject
 
CVSS Version
2  
CVSS Score
3.3  
Severity
Low  
CVSS Base Score
3.3  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-06-08  
Modified Date
2017-01-06  
Seq
2014-3981  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
168661 32053 CVE-2014-3981 http://git.php.net/?p=php-src.git;a=commit;h=91bcadd85e20e50d3f8c2e9721327681640e6f16  View
168662 32053 CVE-2014-3981 APPLE-SA-2015-04-08-2  View
168663 32053 CVE-2014-3981 SSRT101681  View
168664 32053 CVE-2014-3981 HPSBUX03150  View
168665 32053 CVE-2014-3981 [oss-security] 20140606 Re: CVE request: PHP configure script and Lynis tool /tmp/ issues reported on full disclosure  View
168666 32053 CVE-2014-3981 20140604 More /tmp fun (PHP, Lynis)  View
168667 32053 CVE-2014-3981 http://support.apple.com/kb/HT6443  View
168668 32053 CVE-2014-3981 http://www-01.ibm.com/support/docview.wss?uid=swg21683486  View
168669 32053 CVE-2014-3981 http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html  View
168670 32053 CVE-2014-3981 https://bugs.php.net/bug.php?id=67390  View
168671 32053 CVE-2014-3981 https://bugzilla.redhat.com/show_bug.cgi?id=1104978  View
168672 32053 CVE-2014-3981 https://support.apple.com/HT204659  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13915 JVNDB-2014-002790 PHP の設定スクリプトで使用される acinclude.m4 における任意のファイルを上書きされる脆弱性 PHP の設定スクリプトで使用される acinclude.m4 には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2014-3981 71269 CVE-2014-3981 32053 3.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002790.html 2014-06-06 2015-04-13 View