fkie_cve-2013-1643
Vulnerability from fkie_nvd
Published
2013-03-06 13:10
Modified
2024-11-21 01:50
Severity ?
Summary
The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-1824.
References
cve@mitre.orghttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702221
cve@mitre.orghttp://git.php.net/?p=php-src.git%3Ba=commit%3Bh=8e76d0404b7f664ee6719fd98f0483f0ac4669d6
cve@mitre.orghttp://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html
cve@mitre.orghttp://lists.opensuse.org/opensuse-security-announce/2013-07/msg00034.html
cve@mitre.orghttp://lists.opensuse.org/opensuse-security-announce/2013-08/msg00006.html
cve@mitre.orghttp://rhn.redhat.com/errata/RHSA-2013-1307.html
cve@mitre.orghttp://rhn.redhat.com/errata/RHSA-2013-1615.html
cve@mitre.orghttp://secunia.com/advisories/55078
cve@mitre.orghttp://support.apple.com/kb/HT5880
cve@mitre.orghttp://www.debian.org/security/2013/dsa-2639
cve@mitre.orghttp://www.mandriva.com/security/advisories?name=MDVSA-2013:114
cve@mitre.orghttp://www.php.net/ChangeLog-5.php
cve@mitre.orghttp://www.ubuntu.com/usn/USN-1761-1
cve@mitre.orghttps://bugs.gentoo.org/show_bug.cgi?id=459904
cve@mitre.orghttps://bugzilla.redhat.com/show_bug.cgi?id=918187
cve@mitre.orghttps://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0101
af854a3a-2127-422b-91ae-364da2661108http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702221
af854a3a-2127-422b-91ae-364da2661108http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=8e76d0404b7f664ee6719fd98f0483f0ac4669d6
af854a3a-2127-422b-91ae-364da2661108http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html
af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00034.html
af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00006.html
af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2013-1307.html
af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2013-1615.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/55078
af854a3a-2127-422b-91ae-364da2661108http://support.apple.com/kb/HT5880
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2013/dsa-2639
af854a3a-2127-422b-91ae-364da2661108http://www.mandriva.com/security/advisories?name=MDVSA-2013:114
af854a3a-2127-422b-91ae-364da2661108http://www.php.net/ChangeLog-5.php
af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-1761-1
af854a3a-2127-422b-91ae-364da2661108https://bugs.gentoo.org/show_bug.cgi?id=459904
af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=918187
af854a3a-2127-422b-91ae-364da2661108https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0101
Impacted products
Vendor Product Version
php php *
php php 1.0
php php 2.0
php php 2.0b10
php php 3.0
php php 3.0.1
php php 3.0.2
php php 3.0.3
php php 3.0.4
php php 3.0.5
php php 3.0.6
php php 3.0.7
php php 3.0.8
php php 3.0.9
php php 3.0.10
php php 3.0.11
php php 3.0.12
php php 3.0.13
php php 3.0.14
php php 3.0.15
php php 3.0.16
php php 3.0.17
php php 3.0.18
php php 4.0
php php 4.0
php php 4.0
php php 4.0
php php 4.0
php php 4.0.0
php php 4.0.1
php php 4.0.2
php php 4.0.3
php php 4.0.4
php php 4.0.5
php php 4.0.6
php php 4.0.7
php php 4.1.0
php php 4.1.1
php php 4.1.2
php php 4.2.0
php php 4.2.1
php php 4.2.2
php php 4.2.3
php php 4.3.0
php php 4.3.1
php php 4.3.2
php php 4.3.3
php php 4.3.4
php php 4.3.5
php php 4.3.6
php php 4.3.7
php php 4.3.8
php php 4.3.9
php php 4.3.10
php php 4.3.11
php php 4.4.0
php php 4.4.1
php php 4.4.2
php php 4.4.3
php php 4.4.4
php php 4.4.5
php php 4.4.6
php php 4.4.7
php php 4.4.8
php php 4.4.9
php php 5.0.0
php php 5.0.0
php php 5.0.0
php php 5.0.0
php php 5.0.0
php php 5.0.0
php php 5.0.0
php php 5.0.0
php php 5.0.1
php php 5.0.2
php php 5.0.3
php php 5.0.4
php php 5.0.5
php php 5.1.0
php php 5.1.1
php php 5.1.2
php php 5.1.3
php php 5.1.4
php php 5.1.5
php php 5.1.6
php php 5.2.0
php php 5.2.1
php php 5.2.2
php php 5.2.3
php php 5.2.4
php php 5.2.5
php php 5.2.6
php php 5.2.7
php php 5.2.8
php php 5.2.9
php php 5.2.10
php php 5.2.11
php php 5.2.12
php php 5.2.13
php php 5.2.14
php php 5.2.15
php php 5.2.16
php php 5.2.17
php php 5.3.0
php php 5.3.1
php php 5.3.2
php php 5.3.3
php php 5.3.4
php php 5.3.5
php php 5.3.6
php php 5.3.7
php php 5.3.8
php php 5.3.9
php php 5.3.10
php php 5.3.11
php php 5.3.12
php php 5.3.13
php php 5.3.14
php php 5.3.15
php php 5.3.16
php php 5.3.17
php php 5.3.18
php php 5.3.19
php php 5.3.20
php php 5.4.0
php php 5.4.1
php php 5.4.2
php php 5.4.3
php php 5.4.4
php php 5.4.5
php php 5.4.6
php php 5.4.7
php php 5.4.8
php php 5.4.9
php php 5.4.10
php php 5.4.11
php php 5.4.12



{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "3CA0F49B-22B0-4D80-A0D9-B562D2767CE8",
                     versionEndIncluding: "5.3.21",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "92647629-083F-4042-8365-4AD2EBC9C1BF",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*",
                     matchCriteriaId: "83BE1120-6370-4470-8586-6581EDF3FD69",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "245C601D-0FE7-47E3-8304-6FF45E9567D6",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "691BB8BB-329A-4640-B758-7590C99B5E42",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "E2BC4CCE-2774-463E-82EA-36CD442D3A7B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "C478024C-2FCD-463F-A75E-E04660AA9DF1",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "A5BD99C0-E875-496E-BE5E-A8DCBD414B5C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "1851ADE5-C70C-46E0-941A-6ADF7DB5C126",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*",
                     matchCriteriaId: "69DA3BA2-AF53-4C9D-93FA-0317841595B1",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*",
                     matchCriteriaId: "FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*",
                     matchCriteriaId: "67B59D6A-7EDA-4C34-81D6-C2557C85D164",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*",
                     matchCriteriaId: "AEBA40B6-8FDF-41AA-8166-F491FF7F3118",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*",
                     matchCriteriaId: "E74E2B72-A428-4BB3-B6F8-0AF5E487A807",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*",
                     matchCriteriaId: "1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*",
                     matchCriteriaId: "945FF149-3446-4905-BCA1-C397E3497B58",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*",
                     matchCriteriaId: "8E446DBD-FEFA-4D22-9C9D-51F61C01E414",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*",
                     matchCriteriaId: "3C8DE728-78E1-4F9F-BC56-CD9B10E61287",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*",
                     matchCriteriaId: "80E31CC6-9356-4BB7-9F49-320AAF341E1E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*",
                     matchCriteriaId: "1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*",
                     matchCriteriaId: "4B3E7199-8FB7-4930-9C0A-A36A698940B3",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*",
                     matchCriteriaId: "AEEF2298-98E8-409F-9205-84817CEF947B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*",
                     matchCriteriaId: "6AFC00BA-D64D-4407-AC69-FDD9FF013943",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*",
                     matchCriteriaId: "D80F2A8B-B57F-4970-867A-55E8187C1502",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*",
                     matchCriteriaId: "EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*",
                     matchCriteriaId: "49965B80-DC27-4864-BDF0-CBBFF16BFD80",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "7BF57C14-86B6-419A-BAFF-93D01CB1E081",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "78BAA18C-E5A0-4210-B64B-709BBFF31EEC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "13A159B4-B847-47DE-B7F8-89384E6C551B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "57B59616-A309-40B4-94B1-50A7BC00E35C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "0F39A1B1-416E-4436-8007-733B66904A14",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "FC2E5F96-66D2-4F99-A74D-6A2305EE218E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
                     matchCriteriaId: "2D724D09-0D45-4701-93C9-348301217C8C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "6713614A-B14E-4A85-BF89-ED780068FC68",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "FD95F8EB-B428-4B3C-9254-A5DECE03A989",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "069EB7EE-06B9-454F-9007-8DE5DCA33C53",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "18BF5BE6-09EA-45AD-93BF-2BEF1742534E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "EC1460DF-1687-4314-BF1A-01290B20302D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "470380B0-3982-48FC-871B-C8B43C81900D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "63190D9B-7958-4B93-87C6-E7D5A572F6DC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "4AAF4586-74FF-47C6-864B-656FDF3F33D0",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "5245F990-B4A7-4ED8-909D-B8137CE79FAA",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "5652D5B0-68E4-4239-B9B7-599AFCF4C53E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "57B71BB7-5239-4860-9100-8CABC3992D8C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
                     matchCriteriaId: "72BD447A-4EED-482C-8F61-48FAD4FCF8BA",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
                     matchCriteriaId: "B3F9DF9D-15E5-4387-ABE3-A7583331A928",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
                     matchCriteriaId: "11579E5C-D7CF-46EE-B015-5F4185C174E7",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
                     matchCriteriaId: "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
                     matchCriteriaId: "221B9AC4-C63C-4386-B3BD-E4BC102C6124",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "BB25CFBB-347C-479E-8853-F49DD6CBD7D4",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "4D2937B3-D034-400E-84F5-33833CE3764D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "71AEE8B4-FCF8-483B-8D4C-2E80A02E925E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "4C2AF1D9-33B6-4B2C-9269-426B6B720164",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "84B70263-37AA-4539-A286-12038A3792C6",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*",
                     matchCriteriaId: "2E46E4B4-808C-4B47-81D9-EC2B02A5E57B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*",
                     matchCriteriaId: "6FF30D7F-353B-4496-9A89-4EF2BB279E0A",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*",
                     matchCriteriaId: "DD97DF34-35AB-4979-96E2-B23DC8556A79",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "7007E77F-60EF-44D8-9676-15B59DF1325F",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
                     matchCriteriaId: "E727CECE-E452-489A-A42F-5A069D6AF80E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
                     matchCriteriaId: "149A1FB8-593E-412B-8E1C-3E560301D500",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
                     matchCriteriaId: "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
                     matchCriteriaId: "8FC144FA-8F84-44C0-B263-B639FEAD20FB",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
                     matchCriteriaId: "295907B4-C3DE-4021-BE3B-A8826D4379E6",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
                     matchCriteriaId: "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
                     matchCriteriaId: "B881352D-954E-4FC0-9E42-93D02A3F3089",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "74E7AE59-1CB0-4300-BBE0-109F909789EF",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "9222821E-370F-4616-B787-CC22C2F4E7CD",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "9809449F-9A76-4318-B233-B4C2950A6EA9",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "0AA962D4-A4EC-4DC3-B8A9-D10941B92781",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "F8CDFEF9-C367-4800-8A2F-375C261FAE55",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "16E43B88-1563-4EFD-9267-AE3E8C35D67A",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "11E5715F-A8BC-49EF-836B-BB78E1BC0790",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "5FA68843-158E-463E-B68A-1ACF041C4E10",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "1874F637-77E2-4C4A-BF92-AEE96A60BFB0",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "9592B32E-55CD-42D0-901E-8319823BC820",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "A9BF34B5-F74C-4D56-9841-42452D60CB87",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "CD02D837-FD28-4E0F-93F8-25E8D1C84A99",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "88358D1E-BE6F-4CE3-A522-83D1FA4739E3",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "86767200-6C9C-4C3E-B111-0E5BE61E197B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "B00B416D-FF23-4C76-8751-26D305F0FA0F",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "CCB6CDDD-70D3-4004-BCE0-8C4723076103",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "A782CA26-9C38-40A8-92AE-D47B14D2FCE3",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*",
                     matchCriteriaId: "1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*",
                     matchCriteriaId: "0892C89E-9389-4452-B7E0-981A763CD426",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*",
                     matchCriteriaId: "635F3CB1-B042-43CC-91AB-746098018D8C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*",
                     matchCriteriaId: "E1F32DDF-17A3-45B5-9227-833EBEBD3923",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:*",
                     matchCriteriaId: "2CDFB7E9-8510-430F-BFBC-FD811D60DC78",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.2.12:*:*:*:*:*:*:*",
                     matchCriteriaId: "79D5336A-14AA-483E-9CBE-A7B53120B925",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.2.13:*:*:*:*:*:*:*",
                     matchCriteriaId: "3AADA875-E0EA-483A-A07E-2914FE969972",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.2.14:*:*:*:*:*:*:*",
                     matchCriteriaId: "95D48A71-B84E-4B6C-9603-B3373052E568",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.2.15:*:*:*:*:*:*:*",
                     matchCriteriaId: "CAAB7D55-F155-43F9-A563-F2E35CFFEF26",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.2.16:*:*:*:*:*:*:*",
                     matchCriteriaId: "72243A3F-6BFD-472B-9EA4-82BE4253ED27",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.2.17:*:*:*:*:*:*:*",
                     matchCriteriaId: "E415CC22-09CA-47D2-9F1A-0BCA8960835B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "9EF4B938-BB14-4C06-BEE9-10CA755C5DEF",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "981C922C-7A7D-473E-8C43-03AB62FB5B8B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "5D0CD11A-09C2-4C60-8F0C-68E55BD6EE63",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "B0F40E4A-E125-4099-A8B3-D42614AA9312",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "4933D9DD-A630-4A3D-9D13-9E182F5F6F8C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "A9E6D530-91FC-42F4-A427-6601238E0187",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "9EC938DB-E066-407F-BDF8-61A1C41136F7",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.7:*:*:*:*:*:*:*",
                     matchCriteriaId: "ACDF768D-7F5A-4042-B7DD-398F65F3F094",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.8:*:*:*:*:*:*:*",
                     matchCriteriaId: "2AF35BB6-C6B1-4683-A8BE-AA72CC34F5B5",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.9:*:*:*:*:*:*:*",
                     matchCriteriaId: "EC3F1891-032D-409C-904C-A415D2323DFC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.10:*:*:*:*:*:*:*",
                     matchCriteriaId: "4B13826D-06B2-4A46-AB24-092F6935958D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.11:*:*:*:*:*:*:*",
                     matchCriteriaId: "1B6528FC-51BE-4E30-B282-D9841553BA26",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.12:*:*:*:*:*:*:*",
                     matchCriteriaId: "66CF9452-6225-4726-822B-C7CD620A1D6E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.13:*:*:*:*:*:*:*",
                     matchCriteriaId: "A953FF53-1106-42D3-BE4A-4F27C7C42F52",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.14:*:*:*:*:*:*:*",
                     matchCriteriaId: "D4D2F015-A38D-43C6-ADC6-A0EFCE150071",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.15:*:*:*:*:*:*:*",
                     matchCriteriaId: "75A8FF8E-A26A-45AD-BD91-9B4822581CE2",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.16:*:*:*:*:*:*:*",
                     matchCriteriaId: "5F27C2F9-73BE-46EF-B5ED-8D407D22D12E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.17:*:*:*:*:*:*:*",
                     matchCriteriaId: "EB212796-B71B-4F6B-9156-9C5178FF0931",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.18:*:*:*:*:*:*:*",
                     matchCriteriaId: "DFBCD79D-3821-4538-B6F1-49F51E5983E3",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.19:*:*:*:*:*:*:*",
                     matchCriteriaId: "B66E709F-E34E-4744-8970-0F70F95A8761",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.3.20:*:*:*:*:*:*:*",
                     matchCriteriaId: "D20691D0-3102-4E82-BED9-9E7B67F9F778",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:php:php:5.4.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "E7B9B8D2-78B7-4B17-955B-741C7A6F6634",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.4.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "5CA2A940-BD69-4D35-AF12-432CB929248B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.4.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "29BD13F9-86C8-44C4-A860-9A87870A518E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.4.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "1B361FDE-9F6A-4E9A-96F1-619DC56EECB6",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.4.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "3DBD9E7B-1237-47A8-8A07-5CC5246A9C5A",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.4.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "6F2BB41E-2096-4291-B0ED-06825FDFE8BF",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.4.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "52BA94F7-1AF9-415C-AC21-30BC25C74C5D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.4.7:*:*:*:*:*:*:*",
                     matchCriteriaId: "D0A739A0-698A-422B-886B-430A79F6E945",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.4.8:*:*:*:*:*:*:*",
                     matchCriteriaId: "086E0D24-A43E-4CEA-9FB0-FE193B88CC31",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.4.9:*:*:*:*:*:*:*",
                     matchCriteriaId: "EC8D0963-8CA5-4814-9B6D-4E1C3907737B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.4.10:*:*:*:*:*:*:*",
                     matchCriteriaId: "77A4B7E0-C872-4E53-AD72-1BB2755E4FDA",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.4.11:*:*:*:*:*:*:*",
                     matchCriteriaId: "EECCD553-53D5-485E-8C21-E2A5070833B2",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:php:php:5.4.12:*:*:*:*:*:*:*",
                     matchCriteriaId: "95357C79-A754-4E0C-B65B-0FA241962B12",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP WSDL file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue in the soap_xmlParseFile and soap_xmlParseMemory functions.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-1824.",
      },
      {
         lang: "es",
         value: "El parser SOAP en PHP v5.3.22 y v5.4.x anterior a v5.4.13 permite a atacantes remotos leer archivos de su elección a través de un archivo SOAP WSDL conteniendo una entidad externa XML en relación con una referencia de entidad, relacionada con la  External Entity (XXE) XML en las funciones soap_xmlParseFile y soap_xmlParseMemory.",
      },
   ],
   id: "CVE-2013-1643",
   lastModified: "2024-11-21T01:50:03.893",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "MEDIUM",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "NONE",
               baseScore: 5,
               confidentialityImpact: "PARTIAL",
               integrityImpact: "NONE",
               vectorString: "AV:N/AC:L/Au:N/C:P/I:N/A:N",
               version: "2.0",
            },
            exploitabilityScore: 10,
            impactScore: 2.9,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
   },
   published: "2013-03-06T13:10:27.230",
   references: [
      {
         source: "cve@mitre.org",
         url: "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702221",
      },
      {
         source: "cve@mitre.org",
         url: "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=8e76d0404b7f664ee6719fd98f0483f0ac4669d6",
      },
      {
         source: "cve@mitre.org",
         url: "http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00034.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00006.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://rhn.redhat.com/errata/RHSA-2013-1307.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://rhn.redhat.com/errata/RHSA-2013-1615.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/55078",
      },
      {
         source: "cve@mitre.org",
         url: "http://support.apple.com/kb/HT5880",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.debian.org/security/2013/dsa-2639",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.mandriva.com/security/advisories?name=MDVSA-2013:114",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.php.net/ChangeLog-5.php",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.ubuntu.com/usn/USN-1761-1",
      },
      {
         source: "cve@mitre.org",
         url: "https://bugs.gentoo.org/show_bug.cgi?id=459904",
      },
      {
         source: "cve@mitre.org",
         url: "https://bugzilla.redhat.com/show_bug.cgi?id=918187",
      },
      {
         source: "cve@mitre.org",
         url: "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0101",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702221",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=8e76d0404b7f664ee6719fd98f0483f0ac4669d6",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://lists.apple.com/archives/security-announce/2013/Sep/msg00002.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00034.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00006.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://rhn.redhat.com/errata/RHSA-2013-1307.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://rhn.redhat.com/errata/RHSA-2013-1615.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/55078",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://support.apple.com/kb/HT5880",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.debian.org/security/2013/dsa-2639",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.mandriva.com/security/advisories?name=MDVSA-2013:114",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.php.net/ChangeLog-5.php",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.ubuntu.com/usn/USN-1761-1",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://bugs.gentoo.org/show_bug.cgi?id=459904",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://bugzilla.redhat.com/show_bug.cgi?id=918187",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0101",
      },
   ],
   sourceIdentifier: "cve@mitre.org",
   vulnStatus: "Modified",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-200",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.