Zend Framework Multiple Information Disclosure and Security Bypass Vulnerabilities
BID:66358
Info
Zend Framework Multiple Information Disclosure and Security Bypass Vulnerabilities
| Bugtraq ID: | 66358 |
| Class: | Design Error |
| CVE: |
CVE-2014-2681 CVE-2014-2682 CVE-2014-2683 CVE-2014-2684 CVE-2014-2685 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 21 2014 12:00AM |
| Updated: | Jul 15 2015 12:04AM |
| Credit: | Lukas Reschke, and Christian Mainka and Vladislav Mladenov, Ruhr-University Bochum. |
| Vulnerable: |
Zend Zend Framework 1.11.6 Zend Zend Framework 1.11.4 Zend Zend Framework 1.11.3 Zend Zend Framework 1.10.9 Zend Zend Framework 1.10.4 Zend Zend Framework 1.10.3 Zend Zend Framework 1.10.2 Zend Zend Framework 1.9.8 Zend Zend Framework 1.9.7 Zend Zend Framework 1.9.6 Zend Zend Framework 1.9.5 Zend Zend Framework 1.9.4 Zend Zend Framework 1.9.3 Zend Zend Framework 1.9.2 Zend Zend Framework 1.9.1 Zend Zend Framework 1.9 Zend Zend Framework 1.8.5 Zend Zend Framework 1.8.3 Zend Zend Framework 1.8.2 Zend Zend Framework 1.8.1 Zend Zend Framework 1.8 Zend Zend Framework 1.7.9 Zend Zend Framework 1.7.8 Zend Zend Framework 1.7.7 Zend Zend Framework 1.7.6 Zend Zend Framework 1.7.5 Zend Zend Framework 1.7.4 Zend Zend Framework 1.7.3 Zend Zend Framework 1.7.2 Zend Zend Framework 1.7.1 Zend Zend Framework 1.7 Zend Zend Framework 1.7 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Discussion
Zend Framework Multiple Information Disclosure and Security Bypass Vulnerabilities
Zend Framework is prone to multiple information-disclosure and security-bypass vulnerabilities.
An attacker can exploit these issues to gain access to sensitive information; this may lead to further attacks. This attacker may also exploit this issue to cause excessive memory and CPU consumption resulting in denial-of-service conditions.
Zend Framework is prone to multiple information-disclosure and security-bypass vulnerabilities.
An attacker can exploit these issues to gain access to sensitive information; this may lead to further attacks. This attacker may also exploit this issue to cause excessive memory and CPU consumption resulting in denial-of-service conditions.
Exploit / POC
Zend Framework Multiple Information Disclosure and Security Bypass Vulnerabilities
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
Zend Framework Multiple Information Disclosure and Security Bypass Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Zend Framework Multiple Information Disclosure and Security Bypass Vulnerabilities
References:
References:
- Zend Framework Homepage (Zend)