The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions.

This php53 update fixes the following security issues :

  - Insecure temporary file used for cache data was fixed by     switching to a different root only directory     /var/cache/php-pear. (CVE-2014-5459)

  - An incomplete fix for CVE-2014-4049. (CVE-2014-3597)

php5 was updated to fix three security issues :

  - Insecure temporary file use for cache data was fixed by     switching to a different root only directory     /var/cache/php-pear (CVE-2014-5459)

  - An incomplete fix for CVE-2014-4049 (CVE-2014-3597) 

  - gd extension: NUL byte injection in filenames passed to     image handling functions was fixed (CVE-2014-5120)

Also a bug was fixed :

  - fixed suhosin crash if used with php     session_set_save_handler() [bnc#895658]

ID	Name	Product	Family	Severity
93161	SUSE SLES11 Security Update : php53 (SUSE-SU-2016:1638-1) (BACKRONYM)	Nessus	SuSE Local Security Checks	critical
77742	SuSE 11.3 Security Update : php53 (SAT Patch Number 9718)	Nessus	SuSE Local Security Checks	medium
77720	openSUSE Security Update : php5 (openSUSE-SU-2014:1133-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2014-5459

medium

Tenable Plugins

critical

medium

medium