Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-3411

PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary files via crafted input to an application that calls (1) a DOMDocument load method, (2) the xmlwriter_open_uri function, (3) the finfo_file function, or (4) the hash_hmac_file function, as demonstrated by a filename\0.xml attack that bypasses an intended configuration in which client users may read only .xml files.

Published

2016-05-16T10:59:02.360

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 6.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

4.9

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System redhat enterprise_linux 6.0 Yes
Operating System redhat enterprise_linux 7.0 Yes
Operating System redhat enterprise_linux_desktop 7.0 Yes
Operating System redhat enterprise_linux_hpc_node 7.0 Yes
Operating System redhat enterprise_linux_hpc_node_eus 7.1 Yes
Operating System redhat enterprise_linux_server 7.0 Yes
Operating System redhat enterprise_linux_server_eus 7.1 Yes
Operating System redhat enterprise_linux_workstation 7.0 Yes
Application php php ≤ 5.4.39 Yes
Application php php 5.5.0 Yes
Application php php 5.5.1 Yes
Application php php 5.5.2 Yes
Application php php 5.5.3 Yes
Application php php 5.5.4 Yes
Application php php 5.5.5 Yes
Application php php 5.5.6 Yes
Application php php 5.5.7 Yes
Application php php 5.5.8 Yes
Application php php 5.5.9 Yes
Application php php 5.5.10 Yes
Application php php 5.5.11 Yes
Application php php 5.5.12 Yes
Application php php 5.5.13 Yes
Application php php 5.5.14 Yes
Application php php 5.5.15 Yes
Application php php 5.5.16 Yes
Application php php 5.5.17 Yes
Application php php 5.5.18 Yes
Application php php 5.5.19 Yes
Application php php 5.5.20 Yes
Application php php 5.5.21 Yes
Application php php 5.5.22 Yes
Application php php 5.5.23 Yes
Application php php 5.6.0 Yes
Application php php 5.6.1 Yes
Application php php 5.6.2 Yes
Application php php 5.6.3 Yes
Application php php 5.6.4 Yes
Application php php 5.6.5 Yes
Application php php 5.6.6 Yes
Application php php 5.6.7 Yes
References