The (1) Zend_Feed_Rss and (2) Zend_Feed_Atom classes in Zend_Feed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service (CPU and memory consumption) via an XML External Entity (XXE) attack.

Updated php-ZendFramework packages fix security vulnerabilities :

Zend_Dom, Zend_Feed, Zend_Soap, and Zend_XmlRpc in Zend Framework before 1.11.13 and 1.12.0 are vulnerable to XML Entity Expansion (XEE) vectors, leading to Denial of Service vectors. XEE attacks occur when the XML DOCTYPE declaration includes XML entity definitions that contain either recursive or circular references; this leads to CPU and memory consumption, making Denial of Service exploits trivial to implement (ZF2012-02).

A vulnerability was reported in Zend Framework versions prior to 1.11.15 and 1.12.1, which can be exploited to disclose certain sensitive information. This flaw is caused due to an error in the Zend_Feed_Rss and Zend_Feed_Atom classes of the Zend_Feed component, when processing XML data. It can be used to disclose the contents of certain local files by sending specially crafted XML data including external entity references (CVE-2012-5657, ZF2012-05).

Fixes for security relevant issue CVE-2012-5657

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Yury Dyachenko discovered that Zend Framework uses the PHP XML parser in an insecure way, allowing attackers to open files and trigger HTTP requests, potentially accessing restricted information.

ID	Name	Product	Family	Severity
69712	Amazon Linux AMI : php-ZendFramework (ALAS-2013-153)	Nessus	Amazon Linux Local Security Checks	medium
66127	Mandriva Linux Security Advisory : php-ZendFramework (MDVSA-2013:115)	Nessus	Mandriva Local Security Checks	medium
63629	Fedora 18 : php-ZendFramework-1.12.1-1.fc18 (2013-0063)	Nessus	Fedora Local Security Checks	medium
63628	Fedora 16 : php-ZendFramework-1.12.1-1.fc16 (2013-0061)	Nessus	Fedora Local Security Checks	medium
63627	Fedora 17 : php-ZendFramework-1.12.1-1.fc17 (2013-0057)	Nessus	Fedora Local Security Checks	medium
63433	Debian DSA-2602-1 : zendframework - XML external entity inclusion	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2012-5657

critical

Tenable Plugins

medium

medium

medium

medium

medium

medium