The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle Solaris | — | Upgrade web/php-53/extension/php-tcpwrap to version 1.1.3-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-apc to version 3.0.19-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-idn to version 0.2.0-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-xdebug to version 2.0.5-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-idn to version 0.2.0-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-mysql to version 5.3.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-pear to version 5.2.17-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-pear to version 5.3.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-zendopcache to version 7.0.2-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-apc to version 3.1.9-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/server/apache-22/module/apache-php52 to version 5.2.17-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-memcache to version 2.2.5-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-common to version 11.1-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52 to version 5.2.17-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-suhosin to version 0.9.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53 to version 5.3.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-mysql to version 5.2.17-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-52/extension/php-tcpwrap to version 1.1.3-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-suhosin to version 0.9.33-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/server/apache-22/module/apache-php53 to version 5.3.29-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-xdebug to version 2.2.0-0.175.2.8.0.3.0 on Solaris 11.2Upgrade web/php-53/extension/php-memcache to version 3.0.6-0.175.2.8.0.3.0 on Solaris 11.2 | May 29, 2017 | Sep 27, 2014 |
| Php | — | Upgrade to PHP version 5.6.0 | Oct 6, 2014 | Sep 27, 2014 |
| Suse | — | Upgrade php5-ctypeUpgrade php53-ctypeUpgrade php53-develUpgrade php7-zipUpgrade php5-zlibUpgrade php7-fastcgiUpgrade php5-odbcUpgrade php53-domUpgrade php7-snmpUpgrade php5-mbstringUpgrade php5-fpmUpgrade php7-mcryptUpgrade php7-mysqlUpgrade php5-curlUpgrade php5-sysvshmUpgrade php7-shmopUpgrade php5-domUpgrade php53Upgrade php53-dbaUpgrade php7-sqliteUpgrade php5-shmopUpgrade php53-gmpUpgrade apache2-mod_php5Upgrade php53-opensslUpgrade php53-intlUpgrade php7-ldapUpgrade php53-posixUpgrade php53-pearUpgrade php7-wddxUpgrade php72-develUpgrade php7-tokenizerUpgrade php7-opcacheUpgrade php7-pear-archive_tarUpgrade php5-sqliteUpgrade php5-dbaUpgrade php53-zipUpgrade php5-tokenizerUpgrade php5-iconvUpgrade php5-gdUpgrade php7-fileinfoUpgrade php7-iconvUpgrade php7-ctypeUpgrade php53-jsonUpgrade php7-odbcUpgrade php5-fileinfoUpgrade php7-calendarUpgrade php7-zlibUpgrade php7-develUpgrade php53-fastcgiUpgrade php5-pgsqlUpgrade php5-exifUpgrade php53-xmlwriterUpgrade php53-xslUpgrade php53-bz2Upgrade php7-sysvshmUpgrade apache2-mod_php53Upgrade php53-tokenizerUpgrade php7-pharUpgrade php5-pspellUpgrade php53-gettextUpgrade php5-enchantUpgrade php7-pearUpgrade php7-bcmathUpgrade php53-exifUpgrade php7-sysvsemUpgrade php7-dbaUpgrade php5-snmpUpgrade php7-socketsUpgrade php7-enchantUpgrade php7-pspellUpgrade php53-xmlrpcUpgrade php53-pspellUpgrade php53-pcntlUpgrade php53-soapUpgrade php7-gdUpgrade php5-sysvmsgUpgrade php5-xslUpgrade php7-opensslUpgrade php7-pgsqlUpgrade php53-calendarUpgrade php53-gdUpgrade php5-pcntlUpgrade php5-soapUpgrade php5-wddxUpgrade php53-sqliteUpgrade php53-bcmathUpgrade php7-gettextUpgrade php7-exifUpgrade php53-odbcUpgrade php5-xmlreaderUpgrade php7-xmlrpcUpgrade php7-jsonUpgrade php7-xmlwriterUpgrade php7-mbstringUpgrade php5-ldapUpgrade php53-pdoUpgrade php53-wddxUpgrade php7-curlUpgrade php5-pearUpgrade php53-iconvUpgrade php7-bz2Upgrade php5-sysvsemUpgrade php5-jsonUpgrade php5-calendarUpgrade php5-zipUpgrade php53-pgsqlUpgrade php5Upgrade php7-fpmUpgrade php5-intlUpgrade php7-imapUpgrade php53-zlibUpgrade php5-gmpUpgrade php7-xmlreaderUpgrade php53-mysqlUpgrade php53-ldapUpgrade php5-mysqlUpgrade php5-pdoUpgrade php7-domUpgrade php7-pcntlUpgrade php5-mcryptUpgrade php7-posixUpgrade php5-suhosinUpgrade php53-sysvmsgUpgrade php5-opensslUpgrade php5-xmlwriterUpgrade php53-sysvshmUpgrade php7-gmpUpgrade php53-readlineUpgrade php5-develUpgrade php53-xmlreaderUpgrade php53-mbstringUpgrade php7-sysvmsgUpgrade php5-ftpUpgrade php53-snmpUpgrade php7-ftpUpgrade php53-ftpUpgrade php5-fastcgiUpgrade php7-xslUpgrade php5-xmlrpcUpgrade php5-socketsUpgrade php5-bz2Upgrade php5-bcmathUpgrade php5-gettextUpgrade php53-sysvsemUpgrade php53-mcryptUpgrade php53-shmopUpgrade php53-socketsUpgrade php53-tidyUpgrade php53-suhosinUpgrade php53-fileinfoUpgrade php53-imapUpgrade php7-intlUpgrade php53-curlUpgrade php7Upgrade apache2-mod_php7Upgrade php7-pdoUpgrade php7-soap | Dec 18, 2015 | Sep 17, 2014 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 27, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub