Home

CVE-2016-5385

Description

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an applications outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv(HTTP_PROXY) call or (2) a CGI configuration of PHP, aka an httpoxy issue.

Risk Information

Base Score
8.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
81.747

Associated Vulnerability

VulnerabilityOS Platform
Update HP System Management Homepage Detection (x64) 7.5.5.0 to latest versionWindows
Update HP System Management Homepage Detection 7.5.5.0 to latest versionWindows
(RHSA-2016:1609) Moderate: php security update php-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-bcmath-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-bcmath-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-cli-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-cli-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-common-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-common-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-dba-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-dba-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-devel-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-devel-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-embedded-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-embedded-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-enchant-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-enchant-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-fpm-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-fpm-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-gd-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-gd-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-imap-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-imap-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-intl-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-intl-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-ldap-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-ldap-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-mbstring-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-mbstring-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-mysql-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-mysql-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-odbc-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-odbc-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-pdo-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-pdo-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-pgsql-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-pgsql-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-process-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-process-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-pspell-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-pspell-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-recode-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-recode-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-snmp-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-snmp-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-soap-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-soap-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-tidy-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-tidy-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-xml-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-xml-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-xmlrpc-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-xmlrpc-5.3.3-48.el6_8.x86_64.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-zts-5.3.3-48.el6_8.i686.rpmLinux
(RHSA-2016:1609) Moderate: php security update php-zts-5.3.3-48.el6_8.x86_64.rpmLinux
Update HP System Management Homepage Detection 7.5.5.0 to latest version (For Ubuntu)Linux
Update HP System Management Homepage Detection 7.5.5.0 to latest version (For Debian)Linux
Update HP System Management Homepage Detection 7.5.5.0 to latest version (For Centos)Linux
Update HP System Management Homepage Detection 7.5.5.0 to latest version (For RedHat)Linux
Update HP System Management Homepage Detection 7.5.5.0 to latest version (For Suse)Linux
(CESA-2016:1609) Moderate: php security update php-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-bcmath-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-bcmath-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-cli-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-cli-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-common-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-common-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-dba-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-dba-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-devel-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-devel-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-embedded-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-embedded-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-enchant-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-enchant-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-fpm-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-fpm-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-gd-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-gd-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-imap-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-imap-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-intl-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-intl-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-ldap-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-ldap-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-mbstring-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-mbstring-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-mysql-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-mysql-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-odbc-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-odbc-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-pdo-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-pdo-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-pgsql-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-pgsql-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-process-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-process-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-pspell-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-pspell-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-recode-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-recode-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-snmp-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-snmp-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-soap-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-soap-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-tidy-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-tidy-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-xml-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-xml-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-xmlrpc-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-xmlrpc-5.3.3-48.el6_8.x86_64.rpmLinux
(CESA-2016:1609) Moderate: php security update php-zts-5.3.3-48.el6_8.i686.rpmLinux
(CESA-2016:1609) Moderate: php security update php-zts-5.3.3-48.el6_8.x86_64.rpmLinux
Multiple Vulnerabilities affected in system_management_homepage 7.4.0NCM
Multiple Vulnerabilities affected in system_management_homepage 6.2.2.7NCM
Multiple Vulnerabilities affected in system_management_homepage 6.1NCM
Multiple Vulnerabilities affected in system_management_homepage 6.0NCM
Multiple Vulnerabilities affected in system_management_homepage 3.2.7NCM
Multiple Vulnerabilities affected in system_management_homepage 3.2.2NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.9NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.8NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.7-168NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.7NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.6-156NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.6NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.5-146NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.5NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.3NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.2-127NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.2NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.0-118NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.0-109NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.0-103(a)NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.0-103NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1NCM
Multiple Vulnerabilities affected in system_management_homepage 2.0.2NCM
Multiple Vulnerabilities affected in system_management_homepage 2.0.1NCM
Multiple Vulnerabilities affected in system_management_homepage 2.0.0NCM
Multiple Vulnerabilities affected in system_management_homepage 7.5.3.1NCM
Multiple Vulnerabilities affected in system_management_homepage 6.2.0NCM
Multiple Vulnerabilities affected in system_management_homepage 6.1.0.102NCM
Multiple Vulnerabilities affected in system_management_homepage 6.1.0-103NCM
Multiple Vulnerabilities affected in system_management_homepage 6.0.0.96NCM
Multiple Vulnerabilities affected in system_management_homepage 6.0.0-95NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.12-200NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.12-118NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.11-197NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.11NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.10-186NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.9-178NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.8-177NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.7.168NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.6.156NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.5.146-bNCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.5.146NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.4.143NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.4-143NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.2.127NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.0.121NCM
Multiple Vulnerabilities affected in system_management_homepage 2.0.2.106NCM
Multiple Vulnerabilities affected in system_management_homepage 2.0.1.104NCM
Multiple Vulnerabilities affected in system_management_homepage 7.2.1NCM
Multiple Vulnerabilities affected in system_management_homepage 7.2NCM
Multiple Vulnerabilities affected in system_management_homepage 2.2.6NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.11.197-aNCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.10.186-cNCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.10.186-bNCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.10.186NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.10NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.8.179NCM
Multiple Vulnerabilities affected in system_management_homepage 7.1NCM
Multiple Vulnerabilities affected in system_management_homepage 7.0NCM
Multiple Vulnerabilities affected in system_management_homepage 6.3.1NCM
Multiple Vulnerabilities affected in system_management_homepage 6.3.0NCM
Multiple Vulnerabilities affected in system_management_homepage 2.2.8NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.15.210NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.15-210NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.15NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.14.20NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.14NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.12.201NCM
Multiple Vulnerabilities affected in system_management_homepage 7.5.4.3NCM
Multiple Vulnerabilities affected in system_management_homepage 3.0.0.64NCM
Multiple Vulnerabilities affected in system_management_homepage 3.0.0-68NCM
Multiple Vulnerabilities affected in system_management_homepage 3.0.0NCM
Multiple Vulnerabilities affected in system_management_homepage 3.0.2.77-bNCM
Multiple Vulnerabilities affected in system_management_homepage 3.0.2.77NCM
Multiple Vulnerabilities affected in system_management_homepage 3.0.2-77NCM
Multiple Vulnerabilities affected in system_management_homepage 3.0.2NCM
Multiple Vulnerabilities affected in system_management_homepage 3.0.1.73NCM
Multiple Vulnerabilities affected in system_management_homepage 3.0.1-73NCM
Multiple Vulnerabilities affected in system_management_homepage 3.0.1NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.4NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.3.132NCM
Multiple Vulnerabilities affected in system_management_homepage 2.1.1NCM
URL Redirection to Untrusted Site (Open Redirect) Vulnerability (CVE-2016-5385)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234