Description

acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file.

Remediation

References

CVE-2014-3981

Related Vulnerabilities

SugarCRM Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability (CVE-2019-17316)

Chamilo Improper Input Validation Vulnerability (CVE-2021-31933)

WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (3.8.1)

osTicket Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-15580)

WordPress Plugin MailCWP Arbitrary File Upload (1.100)

Severity

Low

Classification

CVE-2014-3981 CWE-59

Tags

Missing Update Known Vulnerabilities