Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Permissions Privileges and Access Controls Vulnerability - CVE-2014-0185 - Vulnerability Database
PHP

PHP Permissions Privileges and Access Controls Vulnerability - CVE-2014-0185

High
Reference: CVE-2014-0185
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-0185
Title: PHP Permissions Privileges and Access Controls Vulnerability
Overview:

sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket which allows local users to gain privileges via a crafted FastCGI client.