USN-2658-1 (UBUNTU-CVE-2015-3411)

Vulnerability from osv_ubuntu – Published: 2015-07-06 12:14 – Updated: 2026-04-22 07:36 – Source website
VLAI
Summary
php5 vulnerabilities
Details

Neal Poole and Tomas Hoger discovered that PHP incorrectly handled NULL bytes in file paths. A remote attacker could possibly use this issue to bypass intended restrictions and create or obtain access to sensitive files. (CVE-2015-3411, CVE-2015-3412, CVE-2015-4025, CVE-2015-4026, CVE-2015-4598)

Emmanuel Law discovered that the PHP phar extension incorrectly handled filenames starting with a NULL byte. A remote attacker could use this issue with a crafted tar archive to cause a denial of service. (CVE-2015-4021)

Max Spelsberg discovered that PHP incorrectly handled the LIST command when connecting to remote FTP servers. A malicious FTP server could possibly use this issue to execute arbitrary code. (CVE-2015-4022, CVE-2015-4643)

Shusheng Liu discovered that PHP incorrectly handled certain malformed form data. A remote attacker could use this issue with crafted form data to cause CPU consumption, leading to a denial of service. (CVE-2015-4024)

Andrea Palazzo discovered that the PHP Soap client incorrectly validated data types. A remote attacker could use this issue with crafted serialized data to possibly execute arbitrary code. (CVE-2015-4147)

Andrea Palazzo discovered that the PHP Soap client incorrectly validated that the uri property is a string. A remote attacker could use this issue with crafted serialized data to possibly obtain sensitive information. (CVE-2015-4148)

Taoguang Chen discovered that PHP incorrectly validated data types in multiple locations. A remote attacker could possibly use these issues to obtain sensitive information or cause a denial of service. (CVE-2015-4599, CVE-2015-4600, CVE-2015-4601, CVE-2015-4602, CVE-2015-4603)

It was discovered that the PHP Fileinfo component incorrectly handled certain files. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service. This issue only affected Ubuntu 15.04. (CVE-2015-4604, CVE-2015-4605)

It was discovered that PHP incorrectly handled table names in php_pgsql_meta_data. A local attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2015-4644)

References
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2015-3411",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2015-3412",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2015-4021",
              "severity": [
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2015-4022",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2015-4024",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2015-4025",
              "severity": [
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2015-4026",
              "severity": [
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2015-4147",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2015-4148",
              "severity": [
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2015-4598",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2015-4599",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2015-4600",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2015-4601",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2015-4602",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2015-4603",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2015-4643",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2015-4644",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libapache2-mod-php5",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "libapache2-mod-php5filter",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "libphp5-embed",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php-pear",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-cgi",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-cli",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-common",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-curl",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-enchant",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-fpm",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-gd",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-gmp",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-intl",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-ldap",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-mysql",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-mysqlnd",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-odbc",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-pgsql",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-pspell",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-readline",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-recode",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-snmp",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-sqlite",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-sybase",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-tidy",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-xmlrpc",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          },
          {
            "binary_name": "php5-xsl",
            "binary_version": "5.5.9+dfsg-1ubuntu4.11"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "php5",
        "purl": "pkg:deb/ubuntu/php5@5.5.9+dfsg-1ubuntu4.11?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.5.9+dfsg-1ubuntu4.11"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5.5.3+dfsg-1ubuntu2",
        "5.5.3+dfsg-1ubuntu3",
        "5.5.6+dfsg-1ubuntu1",
        "5.5.6+dfsg-1ubuntu2",
        "5.5.8+dfsg-2ubuntu1",
        "5.5.9+dfsg-1ubuntu1",
        "5.5.9+dfsg-1ubuntu2",
        "5.5.9+dfsg-1ubuntu3",
        "5.5.9+dfsg-1ubuntu4",
        "5.5.9+dfsg-1ubuntu4.1",
        "5.5.9+dfsg-1ubuntu4.2",
        "5.5.9+dfsg-1ubuntu4.3",
        "5.5.9+dfsg-1ubuntu4.4",
        "5.5.9+dfsg-1ubuntu4.5",
        "5.5.9+dfsg-1ubuntu4.6",
        "5.5.9+dfsg-1ubuntu4.7",
        "5.5.9+dfsg-1ubuntu4.9"
      ]
    }
  ],
  "aliases": [],
  "details": "Neal Poole and Tomas Hoger discovered that PHP incorrectly handled NULL\nbytes in file paths. A remote attacker could possibly use this issue to\nbypass intended restrictions and create or obtain access to sensitive\nfiles. (CVE-2015-3411, CVE-2015-3412, CVE-2015-4025, CVE-2015-4026,\nCVE-2015-4598)\n\nEmmanuel Law discovered that the PHP phar extension incorrectly handled\nfilenames starting with a NULL byte. A remote attacker could use this issue\nwith a crafted tar archive to cause a denial of service. (CVE-2015-4021)\n\nMax Spelsberg discovered that PHP incorrectly handled the LIST command\nwhen connecting to remote FTP servers. A malicious FTP server could\npossibly use this issue to execute arbitrary code. (CVE-2015-4022,\nCVE-2015-4643)\n\nShusheng Liu discovered that PHP incorrectly handled certain malformed form\ndata. A remote attacker could use this issue with crafted form data to\ncause CPU consumption, leading to a denial of service. (CVE-2015-4024)\n\nAndrea Palazzo discovered that the PHP Soap client incorrectly validated\ndata types. A remote attacker could use this issue with crafted serialized\ndata to possibly execute arbitrary code. (CVE-2015-4147)\n\nAndrea Palazzo discovered that the PHP Soap client incorrectly validated\nthat the uri property is a string. A remote attacker could use this issue\nwith crafted serialized data to possibly obtain sensitive information.\n(CVE-2015-4148)\n\nTaoguang Chen discovered that PHP incorrectly validated data types in\nmultiple locations. A remote attacker could possibly use these issues to\nobtain sensitive information or cause a denial of service. (CVE-2015-4599,\nCVE-2015-4600, CVE-2015-4601, CVE-2015-4602, CVE-2015-4603)\n\nIt was discovered that the PHP Fileinfo component incorrectly handled\ncertain files. A remote attacker could use this issue to cause PHP to\ncrash, resulting in a denial of service. This issue only affected Ubuntu\n15.04. (CVE-2015-4604, CVE-2015-4605)\n\nIt was discovered that PHP incorrectly handled table names in\nphp_pgsql_meta_data. A local attacker could possibly use this issue to\ncause PHP to crash, resulting in a denial of service. (CVE-2015-4644)\n",
  "id": "USN-2658-1",
  "modified": "2026-04-22T07:36:32Z",
  "published": "2015-07-06T12:14:52Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-2658-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-3411"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-3412"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4021"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4022"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4024"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4025"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4026"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4147"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4148"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4598"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4599"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4600"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4601"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4602"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4603"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4604"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4605"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4643"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4644"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "php5 vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2015-3411",
    "UBUNTU-CVE-2015-3412",
    "UBUNTU-CVE-2015-4021",
    "UBUNTU-CVE-2015-4022",
    "UBUNTU-CVE-2015-4024",
    "UBUNTU-CVE-2015-4025",
    "UBUNTU-CVE-2015-4026",
    "UBUNTU-CVE-2015-4147",
    "UBUNTU-CVE-2015-4148",
    "UBUNTU-CVE-2015-4598",
    "UBUNTU-CVE-2015-4599",
    "UBUNTU-CVE-2015-4600",
    "UBUNTU-CVE-2015-4601",
    "UBUNTU-CVE-2015-4602",
    "UBUNTU-CVE-2015-4603",
    "UBUNTU-CVE-2015-4604",
    "UBUNTU-CVE-2015-4605",
    "UBUNTU-CVE-2015-4643",
    "UBUNTU-CVE-2015-4644"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.