Unspecified vulnerability in PHP - CVE-2013-1635| ID: oval:org.secpod.oval:def:15482 | Date: (C)2013-09-20 (M)2023-11-10 |
| Class: VULNERABILITY | Family: macos |
The host is installed with Apple Mac OS X 10.6 through 10.6.8 or Mac OS X Lion 10.7 through 10.7.5, Mac OS X Mountain Lion 10.8 through 10.8.4 and is prone to an unspecified vulnerability. The flaw is present in the ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13, which does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive. Successful exploitation allows remote attackers to bypass intended access restrictions by triggering the creation of cached SOAP WSDL files in an arbitrary directory.
| Platform: |
| Apple Mac OS X 10.6 |
| Apple Mac OS X Server 10.6 |
| Apple Mac OS X 10.7 |
| Apple Mac OS X Server 10.7 |
| Apple Mac OS X 10.8 |
| Apple Mac OS X Server 10.8 |
