CVE-2014-3981

acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.3 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:N/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 51%
Affected Products (NVD)
VendorProductVersion
phpphp
𝑥
< 5.3.29
phpphp
5.4.0 ≤
𝑥
< 5.4.30
phpphp
5.5.0 ≤
𝑥
< 5.5.14
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
lynis
artful
ignored
bionic
not-affected
cosmic
not-affected
disco
not-affected
lucid
ignored
precise
ignored
saucy
ignored
trusty
dne
utopic
ignored
vivid
ignored
wily
ignored
xenial
not-affected
yakkety
ignored
zesty
ignored
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
php
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-bcmath
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-cli
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-common
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-dba
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-debuginfo
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-devel
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-embedded
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-enchant
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-fpm
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-gd
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-imap
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-intl
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-ldap
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-mbstring
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-mcrypt
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-mssql
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-mysql
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-mysqlnd
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-odbc
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-pdo
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-pgsql
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-process
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-pspell
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-recode
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-snmp
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-soap
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-tidy
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-xml
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php-xmlrpc
Amazon Linux 1
0:5.3.29-1.7.amzn1
fixed
php54
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-bcmath
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-cli
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-common
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-dba
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-debuginfo
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-devel
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-embedded
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-enchant
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-fpm
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-gd
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-imap
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-intl
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-ldap
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-mbstring
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-mcrypt
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-mssql
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-mysql
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-mysqlnd
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-odbc
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-pdo
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-pgsql
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-process
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-pspell
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-recode
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-snmp
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-soap
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-tidy
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-xml
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php54-xmlrpc
Amazon Linux 1
0:5.4.30-1.56.amzn1
fixed
php55
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-bcmath
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-cli
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-common
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-dba
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-debuginfo
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-devel
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-embedded
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-enchant
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-fpm
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-gd
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-gmp
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-imap
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-intl
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-ldap
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-mbstring
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-mcrypt
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-mssql
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-mysqlnd
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-odbc
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-opcache
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-pdo
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-pgsql
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-process
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-pspell
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-recode
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-snmp
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-soap
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-tidy
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-xml
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
php55-xmlrpc
Amazon Linux 1
0:5.5.14-1.75.amzn1
fixed
Common Weakness Enumeration
References
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=91bcadd85e20e50d3f8c2e9721327681640e6f16
http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
http://marc.info/?l=bugtraq&m=141017844705317&w=2
http://marc.info/?l=bugtraq&m=141390017113542&w=2
http://openwall.com/lists/oss-security/2014/06/06/12
http://seclists.org/fulldisclosure/2014/Jun/21
http://support.apple.com/kb/HT6443
http://www-01.ibm.com/support/docview.wss?uid=swg21683486
http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
https://bugs.php.net/bug.php?id=67390
https://bugzilla.redhat.com/show_bug.cgi?id=1104978
https://support.apple.com/HT204659
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=91bcadd85e20e50d3f8c2e9721327681640e6f16
http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
http://marc.info/?l=bugtraq&m=141017844705317&w=2
http://marc.info/?l=bugtraq&m=141390017113542&w=2
http://openwall.com/lists/oss-security/2014/06/06/12
http://seclists.org/fulldisclosure/2014/Jun/21
http://support.apple.com/kb/HT6443
http://www-01.ibm.com/support/docview.wss?uid=swg21683486
http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
https://bugs.php.net/bug.php?id=67390
https://bugzilla.redhat.com/show_bug.cgi?id=1104978
https://support.apple.com/HT204659