PHP CVE-2015-4598 Multiple Security Bypass Vulnerabilities
BID:75244
Info
PHP CVE-2015-4598 Multiple Security Bypass Vulnerabilities
| Bugtraq ID: | 75244 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-4598 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 17 2015 12:00AM |
| Updated: | Jul 06 2016 02:22PM |
| Credit: | Tomas Hoger |
| Vulnerable: |
Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 PHP PHP 5.4.3 PHP PHP 5.4.2 PHP PHP 5.4.1 PHP PHP 5.4.1RC1-DEV PHP PHP 5.4.0beta2 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Discussion
PHP CVE-2015-4598 Multiple Security Bypass Vulnerabilities
PHP is prone to multiple security-bypass vulnerabilities.
An attacker can leverage these issues to bypass security restrictions and perform unauthorized actions. This may aid in further attacks.
PHP is prone to multiple security-bypass vulnerabilities.
An attacker can leverage these issues to bypass security restrictions and perform unauthorized actions. This may aid in further attacks.
Exploit / POC
PHP CVE-2015-4598 Multiple Security Bypass Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
PHP CVE-2015-4598 Multiple Security Bypass Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
PHP CVE-2015-4598 Multiple Security Bypass Vulnerabilities
References:
References:
- Incorrect handling of paths with NULs, related to bug 69353 (PHP)
- PHP 5 ChangeLog (PHP)
- PHP Homepage (PHP)
- Oracle Linux Bulletin - January 2016 (Oracle)
- Security Advisory - AlienVault v5.2 addresses 55 vulnerabilities (AlienVault)
- Security Advisory Important: php security and bug fix update (Redhat)
- Security Bulletin: Multiple vulnerabilities affect IBM Flex System Chassis Manag (IBM)
- Security Bulletin: Multiple vulnerabilities in php affect IBM Flex System Manger (IBM)
- swg21972384 : IBM Tealeaf Customer Experience PCA Web UI PHP security issues (IBM)