CVE-2015-3412

Description

PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read arbitrary files via crafted input to an application that calls the stream_resolve_include_path function in ext/standard/streamsfuncs.c, as demonstrated by a filename.extension attack that bypasses an intended configuration in which client users may read files with only one specific extension.

Risk Information

Base Score

5.3

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS Score

Exploitation Probability

1.006

Associated Vulnerability

Vulnerability	OS Platform
HTML-embedded scripting language interpreter (USN-2658-1) php5-cgi_5.6.4+dfsg-4ubuntu6.4_i386.deb	Linux
HTML-embedded scripting language interpreter (USN-2658-1) php5-cgi_5.6.4+dfsg-4ubuntu6.4_amd64.deb	Linux
HTML-embedded scripting language interpreter (USN-2658-1) php5-cli_5.6.4+dfsg-4ubuntu6.4_i386.deb	Linux
HTML-embedded scripting language interpreter (USN-2658-1) php5-cli_5.6.4+dfsg-4ubuntu6.4_amd64.deb	Linux
HTML-embedded scripting language interpreter (USN-2658-1) php5-fpm_5.6.4+dfsg-4ubuntu6.4_i386.deb	Linux
HTML-embedded scripting language interpreter (USN-2658-1) php5-fpm_5.6.4+dfsg-4ubuntu6.4_amd64.deb	Linux
HTML-embedded scripting language interpreter (USN-2658-1) libapache2-mod-php5_5.6.4+dfsg-4ubuntu6.4_i386.deb	Linux
HTML-embedded scripting language interpreter (USN-2658-1) libapache2-mod-php5_5.6.4+dfsg-4ubuntu6.4_amd64.deb	Linux
Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-3412)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234