CVE-2015-3411

CWE-20 — Improper Input ValidationCWE-62610 documents7 sources
Severity
6.5MEDIUM
EPSS
0.3%
top 47.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
PHP PHPRedhat Enterprise LinuxRedhat Enterprise Linux Desktop+5 more
Timeline
PublishedMay 16
Latest updateMay 14

Description

PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument load method, (2) the xmlwriter_open_uri function, (3) the finfo_file function, or (4) the hash_hmac_file function, as demonstrated by a filename\0.xml attack that bypasses an intended configuration in which client users may read only .xml files.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NExploitability: 3.9 | Impact: 2.5

Affected Packages6 packages

▶Ubuntuphp5< 5.5.9+dfsg-1ubuntu4.11
▶NVDphp/php5.4.39+32

Also affects: Enterprise Linux 6.0, 7.0, 7.1

🔴Vulnerability Details

4
GHSA
GHSA-4gf4-5fpq-6cwc: PHP before 5↗2022-05-14
▶
CVEList
CVE-2015-3411: PHP before 5↗2016-05-16
▶
OSV
php5 vulnerabilities↗2015-07-06
▶
OSV
CVE-2015-3411: PHP before 5↗2015-06-23
▶

📋Vendor Advisories

2
Ubuntu
PHP vulnerabilities↗2015-07-06
▶
Red Hat
php: missing null byte checks for paths in various PHP extensions↗2015-04-16
▶

💬Community

2
Bugzilla
CVE-2015-4598 php: missing null byte checks for paths in DOM and GD extensions↗2015-06-17
▶
Bugzilla
CVE-2015-3411 php: missing null byte checks for paths in various PHP extensions↗2015-04-20
▶
CVE-2015-3411 (MEDIUM CVSS 6.5) | PHP before 5.4.40 | cvebase.io