Vulnerability Database

296,733

Total vulnerabilities in the database

CVE-2014-5459

The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions.

  • Published: Sep 27, 2014
  • Updated: Apr 13, 2023
  • CVE: CVE-2014-5459
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 3.6
  • AV:L/AC:L/Au:N/C:N/I:P/A:P

CWEs:

Software From Fixed in
php / php - 5.6.0.x
oracle / solaris 11.2 11.2.x
opensuse / evergreen 11.4 11.4.x
opensuse / opensuse 12.3 12.3.x
opensuse / opensuse 13.1 13.1.x