fkie_cve-2013-1643
Vulnerability from fkie_nvd
Published
2013-03-06 13:10
Modified
2024-11-21 01:50
Severity ?
Summary
The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-1824.
References
Impacted products
Vendor | Product | Version | |
---|---|---|---|
php | php | * | |
php | php | 1.0 | |
php | php | 2.0 | |
php | php | 2.0b10 | |
php | php | 3.0 | |
php | php | 3.0.1 | |
php | php | 3.0.2 | |
php | php | 3.0.3 | |
php | php | 3.0.4 | |
php | php | 3.0.5 | |
php | php | 3.0.6 | |
php | php | 3.0.7 | |
php | php | 3.0.8 | |
php | php | 3.0.9 | |
php | php | 3.0.10 | |
php | php | 3.0.11 | |
php | php | 3.0.12 | |
php | php | 3.0.13 | |
php | php | 3.0.14 | |
php | php | 3.0.15 | |
php | php | 3.0.16 | |
php | php | 3.0.17 | |
php | php | 3.0.18 | |
php | php | 4.0 | |
php | php | 4.0 | |
php | php | 4.0 | |
php | php | 4.0 | |
php | php | 4.0 | |
php | php | 4.0.0 | |
php | php | 4.0.1 | |
php | php | 4.0.2 | |
php | php | 4.0.3 | |
php | php | 4.0.4 | |
php | php | 4.0.5 | |
php | php | 4.0.6 | |
php | php | 4.0.7 | |
php | php | 4.1.0 | |
php | php | 4.1.1 | |
php | php | 4.1.2 | |
php | php | 4.2.0 | |
php | php | 4.2.1 | |
php | php | 4.2.2 | |
php | php | 4.2.3 | |
php | php | 4.3.0 | |
php | php | 4.3.1 | |
php | php | 4.3.2 | |
php | php | 4.3.3 | |
php | php | 4.3.4 | |
php | php | 4.3.5 | |
php | php | 4.3.6 | |
php | php | 4.3.7 | |
php | php | 4.3.8 | |
php | php | 4.3.9 | |
php | php | 4.3.10 | |
php | php | 4.3.11 | |
php | php | 4.4.0 | |
php | php | 4.4.1 | |
php | php | 4.4.2 | |
php | php | 4.4.3 | |
php | php | 4.4.4 | |
php | php | 4.4.5 | |
php | php | 4.4.6 | |
php | php | 4.4.7 | |
php | php | 4.4.8 | |
php | php | 4.4.9 | |
php | php | 5.0.0 | |
php | php | 5.0.0 | |
php | php | 5.0.0 | |
php | php | 5.0.0 | |
php | php | 5.0.0 | |
php | php | 5.0.0 | |
php | php | 5.0.0 | |
php | php | 5.0.0 | |
php | php | 5.0.1 | |
php | php | 5.0.2 | |
php | php | 5.0.3 | |
php | php | 5.0.4 | |
php | php | 5.0.5 | |
php | php | 5.1.0 | |
php | php | 5.1.1 | |
php | php | 5.1.2 | |
php | php | 5.1.3 | |
php | php | 5.1.4 | |
php | php | 5.1.5 | |
php | php | 5.1.6 | |
php | php | 5.2.0 | |
php | php | 5.2.1 | |
php | php | 5.2.2 | |
php | php | 5.2.3 | |
php | php | 5.2.4 | |
php | php | 5.2.5 | |
php | php | 5.2.6 | |
php | php | 5.2.7 | |
php | php | 5.2.8 | |
php | php | 5.2.9 | |
php | php | 5.2.10 | |
php | php | 5.2.11 | |
php | php | 5.2.12 | |
php | php | 5.2.13 | |
php | php | 5.2.14 | |
php | php | 5.2.15 | |
php | php | 5.2.16 | |
php | php | 5.2.17 | |
php | php | 5.3.0 | |
php | php | 5.3.1 | |
php | php | 5.3.2 | |
php | php | 5.3.3 | |
php | php | 5.3.4 | |
php | php | 5.3.5 | |
php | php | 5.3.6 | |
php | php | 5.3.7 | |
php | php | 5.3.8 | |
php | php | 5.3.9 | |
php | php | 5.3.10 | |
php | php | 5.3.11 | |
php | php | 5.3.12 | |
php | php | 5.3.13 | |
php | php | 5.3.14 | |
php | php | 5.3.15 | |
php | php | 5.3.16 | |
php | php | 5.3.17 | |
php | php | 5.3.18 | |
php | php | 5.3.19 | |
php | php | 5.3.20 | |
php | php | 5.4.0 | |
php | php | 5.4.1 | |
php | php | 5.4.2 | |
php | php | 5.4.3 | |
php | php | 5.4.4 | |
php | php | 5.4.5 | |
php | php | 5.4.6 | |
php | php | 5.4.7 | |
php | php | 5.4.8 | |
php | php | 5.4.9 | |
php | php | 5.4.10 | |
php | php | 5.4.11 | |
php | php | 5.4.12 |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*", matchCriteriaId: "3CA0F49B-22B0-4D80-A0D9-B562D2767CE8", versionEndIncluding: "5.3.21", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*", matchCriteriaId: "92647629-083F-4042-8365-4AD2EBC9C1BF", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*", matchCriteriaId: "FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*", matchCriteriaId: "83BE1120-6370-4470-8586-6581EDF3FD69", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*", matchCriteriaId: "245C601D-0FE7-47E3-8304-6FF45E9567D6", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*", matchCriteriaId: "691BB8BB-329A-4640-B758-7590C99B5E42", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*", matchCriteriaId: "E2BC4CCE-2774-463E-82EA-36CD442D3A7B", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*", matchCriteriaId: "C478024C-2FCD-463F-A75E-E04660AA9DF1", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*", matchCriteriaId: "AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*", matchCriteriaId: "A5BD99C0-E875-496E-BE5E-A8DCBD414B5C", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*", matchCriteriaId: "1851ADE5-C70C-46E0-941A-6ADF7DB5C126", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*", matchCriteriaId: "69DA3BA2-AF53-4C9D-93FA-0317841595B1", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*", matchCriteriaId: "FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*", matchCriteriaId: "67B59D6A-7EDA-4C34-81D6-C2557C85D164", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*", matchCriteriaId: "AEBA40B6-8FDF-41AA-8166-F491FF7F3118", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*", matchCriteriaId: "E74E2B72-A428-4BB3-B6F8-0AF5E487A807", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*", matchCriteriaId: "1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*", matchCriteriaId: "945FF149-3446-4905-BCA1-C397E3497B58", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*", matchCriteriaId: "8E446DBD-FEFA-4D22-9C9D-51F61C01E414", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*", matchCriteriaId: "3C8DE728-78E1-4F9F-BC56-CD9B10E61287", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*", matchCriteriaId: "80E31CC6-9356-4BB7-9F49-320AAF341E1E", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*", matchCriteriaId: "1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*", matchCriteriaId: "4B3E7199-8FB7-4930-9C0A-A36A698940B3", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*", matchCriteriaId: "AEEF2298-98E8-409F-9205-84817CEF947B", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*", matchCriteriaId: "6AFC00BA-D64D-4407-AC69-FDD9FF013943", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*", matchCriteriaId: "D80F2A8B-B57F-4970-867A-55E8187C1502", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*", matchCriteriaId: "EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*", matchCriteriaId: "49965B80-DC27-4864-BDF0-CBBFF16BFD80", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*", matchCriteriaId: "7BF57C14-86B6-419A-BAFF-93D01CB1E081", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*", matchCriteriaId: "78BAA18C-E5A0-4210-B64B-709BBFF31EEC", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*", matchCriteriaId: "13A159B4-B847-47DE-B7F8-89384E6C551B", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*", matchCriteriaId: "57B59616-A309-40B4-94B1-50A7BC00E35C", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*", matchCriteriaId: "0F39A1B1-416E-4436-8007-733B66904A14", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*", matchCriteriaId: "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*", matchCriteriaId: "FC2E5F96-66D2-4F99-A74D-6A2305EE218E", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*", matchCriteriaId: "2D724D09-0D45-4701-93C9-348301217C8C", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*", matchCriteriaId: "6713614A-B14E-4A85-BF89-ED780068FC68", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*", matchCriteriaId: "FD95F8EB-B428-4B3C-9254-A5DECE03A989", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*", matchCriteriaId: "069EB7EE-06B9-454F-9007-8DE5DCA33C53", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*", matchCriteriaId: "18BF5BE6-09EA-45AD-93BF-2BEF1742534E", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*", matchCriteriaId: "EC1460DF-1687-4314-BF1A-01290B20302D", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*", matchCriteriaId: "470380B0-3982-48FC-871B-C8B43C81900D", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*", matchCriteriaId: "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*", matchCriteriaId: "63190D9B-7958-4B93-87C6-E7D5A572F6DC", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*", matchCriteriaId: "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*", matchCriteriaId: "4AAF4586-74FF-47C6-864B-656FDF3F33D0", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*", matchCriteriaId: "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*", matchCriteriaId: "5245F990-B4A7-4ED8-909D-B8137CE79FAA", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*", matchCriteriaId: "5652D5B0-68E4-4239-B9B7-599AFCF4C53E", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*", matchCriteriaId: "57B71BB7-5239-4860-9100-8CABC3992D8C", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*", matchCriteriaId: "72BD447A-4EED-482C-8F61-48FAD4FCF8BA", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*", matchCriteriaId: "B3F9DF9D-15E5-4387-ABE3-A7583331A928", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*", matchCriteriaId: "11579E5C-D7CF-46EE-B015-5F4185C174E7", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*", matchCriteriaId: "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*", matchCriteriaId: "221B9AC4-C63C-4386-B3BD-E4BC102C6124", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*", matchCriteriaId: "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*", matchCriteriaId: "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*", matchCriteriaId: "BB25CFBB-347C-479E-8853-F49DD6CBD7D4", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*", matchCriteriaId: "4D2937B3-D034-400E-84F5-33833CE3764D", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*", matchCriteriaId: "71AEE8B4-FCF8-483B-8D4C-2E80A02E925E", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*", matchCriteriaId: "4C2AF1D9-33B6-4B2C-9269-426B6B720164", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*", matchCriteriaId: "84B70263-37AA-4539-A286-12038A3792C6", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*", matchCriteriaId: "2E46E4B4-808C-4B47-81D9-EC2B02A5E57B", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*", matchCriteriaId: "6FF30D7F-353B-4496-9A89-4EF2BB279E0A", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*", matchCriteriaId: "DD97DF34-35AB-4979-96E2-B23DC8556A79", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*", matchCriteriaId: "7007E77F-60EF-44D8-9676-15B59DF1325F", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*", matchCriteriaId: "E727CECE-E452-489A-A42F-5A069D6AF80E", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*", matchCriteriaId: "149A1FB8-593E-412B-8E1C-3E560301D500", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*", matchCriteriaId: "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*", matchCriteriaId: "8FC144FA-8F84-44C0-B263-B639FEAD20FB", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*", matchCriteriaId: "295907B4-C3DE-4021-BE3B-A8826D4379E6", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*", matchCriteriaId: "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*", matchCriteriaId: "B881352D-954E-4FC0-9E42-93D02A3F3089", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*", matchCriteriaId: "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*", matchCriteriaId: "74E7AE59-1CB0-4300-BBE0-109F909789EF", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*", matchCriteriaId: "9222821E-370F-4616-B787-CC22C2F4E7CD", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*", matchCriteriaId: "9809449F-9A76-4318-B233-B4C2950A6EA9", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*", matchCriteriaId: "0AA962D4-A4EC-4DC3-B8A9-D10941B92781", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*", matchCriteriaId: "F8CDFEF9-C367-4800-8A2F-375C261FAE55", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*", matchCriteriaId: "16E43B88-1563-4EFD-9267-AE3E8C35D67A", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*", matchCriteriaId: "11E5715F-A8BC-49EF-836B-BB78E1BC0790", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*", matchCriteriaId: "5FA68843-158E-463E-B68A-1ACF041C4E10", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*", matchCriteriaId: "1874F637-77E2-4C4A-BF92-AEE96A60BFB0", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*", matchCriteriaId: "9592B32E-55CD-42D0-901E-8319823BC820", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*", matchCriteriaId: "A9BF34B5-F74C-4D56-9841-42452D60CB87", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*", matchCriteriaId: "CD02D837-FD28-4E0F-93F8-25E8D1C84A99", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*", matchCriteriaId: "88358D1E-BE6F-4CE3-A522-83D1FA4739E3", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*", matchCriteriaId: "D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*", matchCriteriaId: "86767200-6C9C-4C3E-B111-0E5BE61E197B", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*", matchCriteriaId: "B00B416D-FF23-4C76-8751-26D305F0FA0F", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*", matchCriteriaId: "CCB6CDDD-70D3-4004-BCE0-8C4723076103", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*", matchCriteriaId: "A782CA26-9C38-40A8-92AE-D47B14D2FCE3", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*", matchCriteriaId: "1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*", matchCriteriaId: "0892C89E-9389-4452-B7E0-981A763CD426", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*", matchCriteriaId: "635F3CB1-B042-43CC-91AB-746098018D8C", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*", matchCriteriaId: "E1F32DDF-17A3-45B5-9227-833EBEBD3923", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:*", matchCriteriaId: "2CDFB7E9-8510-430F-BFBC-FD811D60DC78", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.2.12:*:*:*:*:*:*:*", matchCriteriaId: "79D5336A-14AA-483E-9CBE-A7B53120B925", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.2.13:*:*:*:*:*:*:*", matchCriteriaId: "3AADA875-E0EA-483A-A07E-2914FE969972", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.2.14:*:*:*:*:*:*:*", matchCriteriaId: "95D48A71-B84E-4B6C-9603-B3373052E568", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.2.15:*:*:*:*:*:*:*", matchCriteriaId: "CAAB7D55-F155-43F9-A563-F2E35CFFEF26", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.2.16:*:*:*:*:*:*:*", matchCriteriaId: "72243A3F-6BFD-472B-9EA4-82BE4253ED27", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.2.17:*:*:*:*:*:*:*", matchCriteriaId: "E415CC22-09CA-47D2-9F1A-0BCA8960835B", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*", matchCriteriaId: "9EF4B938-BB14-4C06-BEE9-10CA755C5DEF", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*", matchCriteriaId: "981C922C-7A7D-473E-8C43-03AB62FB5B8B", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*", matchCriteriaId: "5D0CD11A-09C2-4C60-8F0C-68E55BD6EE63", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.3:*:*:*:*:*:*:*", matchCriteriaId: "B0F40E4A-E125-4099-A8B3-D42614AA9312", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.4:*:*:*:*:*:*:*", matchCriteriaId: "4933D9DD-A630-4A3D-9D13-9E182F5F6F8C", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.5:*:*:*:*:*:*:*", matchCriteriaId: "A9E6D530-91FC-42F4-A427-6601238E0187", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.6:*:*:*:*:*:*:*", matchCriteriaId: "9EC938DB-E066-407F-BDF8-61A1C41136F7", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.7:*:*:*:*:*:*:*", matchCriteriaId: "ACDF768D-7F5A-4042-B7DD-398F65F3F094", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.8:*:*:*:*:*:*:*", matchCriteriaId: "2AF35BB6-C6B1-4683-A8BE-AA72CC34F5B5", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.9:*:*:*:*:*:*:*", matchCriteriaId: "EC3F1891-032D-409C-904C-A415D2323DFC", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.10:*:*:*:*:*:*:*", matchCriteriaId: "4B13826D-06B2-4A46-AB24-092F6935958D", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.11:*:*:*:*:*:*:*", matchCriteriaId: "1B6528FC-51BE-4E30-B282-D9841553BA26", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.12:*:*:*:*:*:*:*", matchCriteriaId: "66CF9452-6225-4726-822B-C7CD620A1D6E", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.13:*:*:*:*:*:*:*", matchCriteriaId: "A953FF53-1106-42D3-BE4A-4F27C7C42F52", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.14:*:*:*:*:*:*:*", matchCriteriaId: "D4D2F015-A38D-43C6-ADC6-A0EFCE150071", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.15:*:*:*:*:*:*:*", matchCriteriaId: "75A8FF8E-A26A-45AD-BD91-9B4822581CE2", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.16:*:*:*:*:*:*:*", matchCriteriaId: "5F27C2F9-73BE-46EF-B5ED-8D407D22D12E", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.17:*:*:*:*:*:*:*", matchCriteriaId: "EB212796-B71B-4F6B-9156-9C5178FF0931", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.18:*:*:*:*:*:*:*", matchCriteriaId: "DFBCD79D-3821-4538-B6F1-49F51E5983E3", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.19:*:*:*:*:*:*:*", matchCriteriaId: "B66E709F-E34E-4744-8970-0F70F95A8761", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.3.20:*:*:*:*:*:*:*", matchCriteriaId: "D20691D0-3102-4E82-BED9-9E7B67F9F778", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:php:php:5.4.0:*:*:*:*:*:*:*", matchCriteriaId: "E7B9B8D2-78B7-4B17-955B-741C7A6F6634", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.4.1:*:*:*:*:*:*:*", matchCriteriaId: "5CA2A940-BD69-4D35-AF12-432CB929248B", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.4.2:*:*:*:*:*:*:*", matchCriteriaId: "29BD13F9-86C8-44C4-A860-9A87870A518E", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.4.3:*:*:*:*:*:*:*", matchCriteriaId: "1B361FDE-9F6A-4E9A-96F1-619DC56EECB6", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.4.4:*:*:*:*:*:*:*", matchCriteriaId: "3DBD9E7B-1237-47A8-8A07-5CC5246A9C5A", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.4.5:*:*:*:*:*:*:*", matchCriteriaId: "6F2BB41E-2096-4291-B0ED-06825FDFE8BF", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.4.6:*:*:*:*:*:*:*", matchCriteriaId: "52BA94F7-1AF9-415C-AC21-30BC25C74C5D", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.4.7:*:*:*:*:*:*:*", matchCriteriaId: "D0A739A0-698A-422B-886B-430A79F6E945", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.4.8:*:*:*:*:*:*:*", matchCriteriaId: "086E0D24-A43E-4CEA-9FB0-FE193B88CC31", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.4.9:*:*:*:*:*:*:*", matchCriteriaId: "EC8D0963-8CA5-4814-9B6D-4E1C3907737B", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.4.10:*:*:*:*:*:*:*", matchCriteriaId: "77A4B7E0-C872-4E53-AD72-1BB2755E4FDA", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.4.11:*:*:*:*:*:*:*", matchCriteriaId: "EECCD553-53D5-485E-8C21-E2A5070833B2", vulnerable: true, }, { criteria: "cpe:2.3:a:php:php:5.4.12:*:*:*:*:*:*:*", matchCriteriaId: "95357C79-A754-4E0C-B65B-0FA241962B12", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-1824.", }, { lang: "es", value: "El parser SOAP en PHP v5.3.22 y v5.4.x anterior a v5.4.13 permite a atacantes remotos leer archivos de su elección a través de un archivo SOAP WSDL conteniendo una entidad externa XML en relación con una referencia de entidad, relacionada con la External Entity (XXE) XML en las funciones soap_xmlParseFile y soap_xmlParseMemory.", }, ], id: "CVE-2013-1643", lastModified: "2024-11-21T01:50:03.893", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "MEDIUM", cvssData: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "NONE", baseScore: 5, confidentialityImpact: "PARTIAL", integrityImpact: "NONE", vectorString: "AV:N/AC:L/Au:N/C:P/I:N/A:N", version: "2.0", }, exploitabilityScore: 10, impactScore: 2.9, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], }, published: "2013-03-06T13:10:27.230", references: [ { source: "cve@mitre.org", url: "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702221", }, { source: "cve@mitre.org", url: "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=8e76d0404b7f664ee6719fd98f0483f0ac4669d6", }, { source: "cve@mitre.org", url: "http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html", }, { source: "cve@mitre.org", url: "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00034.html", }, { source: "cve@mitre.org", url: "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00006.html", }, { source: "cve@mitre.org", url: "http://rhn.redhat.com/errata/RHSA-2013-1307.html", }, { source: "cve@mitre.org", url: "http://rhn.redhat.com/errata/RHSA-2013-1615.html", }, { source: "cve@mitre.org", url: "http://secunia.com/advisories/55078", }, { source: "cve@mitre.org", url: "http://support.apple.com/kb/HT5880", }, { source: "cve@mitre.org", url: "http://www.debian.org/security/2013/dsa-2639", }, { source: "cve@mitre.org", url: "http://www.mandriva.com/security/advisories?name=MDVSA-2013:114", }, { source: "cve@mitre.org", url: "http://www.php.net/ChangeLog-5.php", }, { source: "cve@mitre.org", url: "http://www.ubuntu.com/usn/USN-1761-1", }, { source: "cve@mitre.org", url: "https://bugs.gentoo.org/show_bug.cgi?id=459904", }, { source: "cve@mitre.org", url: "https://bugzilla.redhat.com/show_bug.cgi?id=918187", }, { source: "cve@mitre.org", url: "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0101", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702221", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=8e76d0404b7f664ee6719fd98f0483f0ac4669d6", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00034.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00006.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://rhn.redhat.com/errata/RHSA-2013-1307.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://rhn.redhat.com/errata/RHSA-2013-1615.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/55078", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://support.apple.com/kb/HT5880", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.debian.org/security/2013/dsa-2639", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.mandriva.com/security/advisories?name=MDVSA-2013:114", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.php.net/ChangeLog-5.php", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.ubuntu.com/usn/USN-1761-1", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://bugs.gentoo.org/show_bug.cgi?id=459904", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://bugzilla.redhat.com/show_bug.cgi?id=918187", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0101", }, ], sourceIdentifier: "cve@mitre.org", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-200", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
Title of the comment
Description of the comment
Loading…
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.