CVE-2014-0185 Privilege escalation in n/a

High 7.2 Published 6 May 2014 Updated 6 Aug 2024

Local attackers can escalate privileges by connecting to the PHP-FPM UNIX socket due to insecure 0666 permissions.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2014-0185?

CVE-2014-0185 is a high-severity vulnerability in Php Php, published on 6 May 2014. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client.

Weakness: CWE-269

Which versions are affected by CVE-2014-0185?

It affects 1 product.

Linux distribution packages (1)

froxlor openSUSE:Tumbleweed All versions 0.9.38.4-1.1

Products include Php Php.

How do I fix CVE-2014-0185?

Upgrade to a fixed version.

Is CVE-2014-0185 being exploited?

There is no known exploitation of CVE-2014-0185 in the wild and no public exploit code.

All Php Php vulnerabilities

Sources

Also known as GHSA-g7xr-pqqf-vpjw, MGASA-2014-0215, UBUNTU-CVE-2014-0185, openSUSE-SU-2024:10487-1.