admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-07-29 05:56:59 +00:00
Code Issues Packages Projects Releases Wiki Activity
cvelist/2016/5xxx/CVE-2016-5385.json
CVE Team 10ef78553f
"-Synchronized-Data."
2023-02-12 23:01:54 +00:00

183 lines
8.1 KiB
JSON
Raw Blame History

{
"data_version": "4.0",
"data_type": "CVE",
"data_format": "MITRE",
"CVE_data_meta": {
"ID": "CVE-2016-5385",
"ASSIGNER": "secalert@redhat.com",
"STATE": "PUBLIC"
},
"description": {
"description_data": [
{
"lang": "eng",
"value": "PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an \"httpoxy\" issue."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"affects": {
"vendor": {
"vendor_data": [
{
"vendor_name": "n/a",
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "n/a"
}
]
}
}
]
}
}
]
}
},
"references": {
"reference_data": [
{
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html",
"refsource": "MISC",
"name": "http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html",
"refsource": "MISC",
"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html"
},
{
"url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",
"refsource": "MISC",
"name": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
},
{
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",
"refsource": "MISC",
"name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722"
},
{
"url": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html",
"refsource": "MISC",
"name": "http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2016-1609.html",
"refsource": "MISC",
"name": "http://rhn.redhat.com/errata/RHSA-2016-1609.html"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2016-1610.html",
"refsource": "MISC",
"name": "http://rhn.redhat.com/errata/RHSA-2016-1610.html"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2016-1611.html",
"refsource": "MISC",
"name": "http://rhn.redhat.com/errata/RHSA-2016-1611.html"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2016-1612.html",
"refsource": "MISC",
"name": "http://rhn.redhat.com/errata/RHSA-2016-1612.html"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2016-1613.html",
"refsource": "MISC",
"name": "http://rhn.redhat.com/errata/RHSA-2016-1613.html"
},
{
"url": "http://www.debian.org/security/2016/dsa-3631",
"refsource": "MISC",
"name": "http://www.debian.org/security/2016/dsa-3631"
},
{
"url": "http://www.kb.cert.org/vuls/id/797896",
"refsource": "MISC",
"name": "http://www.kb.cert.org/vuls/id/797896"
},
{
"url": "http://www.securityfocus.com/bid/91821",
"refsource": "MISC",
"name": "http://www.securityfocus.com/bid/91821"
},
{
"url": "http://www.securitytracker.com/id/1036335",
"refsource": "MISC",
"name": "http://www.securitytracker.com/id/1036335"
},
{
"url": "https://github.com/guzzle/guzzle/releases/tag/6.2.1",
"refsource": "MISC",
"name": "https://github.com/guzzle/guzzle/releases/tag/6.2.1"
},
{
"url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03770en_us",
"refsource": "MISC",
"name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03770en_us"
},
{
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149",
"refsource": "MISC",
"name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149"
},
{
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05333297",
"refsource": "MISC",
"name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05333297"
},
{
"url": "https://httpoxy.org/",
"refsource": "MISC",
"name": "https://httpoxy.org/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7RMYXAVNYL2MOBJTFATE73TOVOEZYC5R/",
"refsource": "MISC",
"name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7RMYXAVNYL2MOBJTFATE73TOVOEZYC5R/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXFEIMZPSVGZQQAYIQ7U7DFVX3IBSDLF/",
"refsource": "MISC",
"name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXFEIMZPSVGZQQAYIQ7U7DFVX3IBSDLF/"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KZOIUYZDBWNDDHC6XTOLZYRMRXZWTJCP/",
"refsource": "MISC",
"name": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KZOIUYZDBWNDDHC6XTOLZYRMRXZWTJCP/"
},
{
"url": "https://security.gentoo.org/glsa/201611-22",
"refsource": "MISC",
"name": "https://security.gentoo.org/glsa/201611-22"
},
{
"url": "https://www.drupal.org/SA-CORE-2016-003",
"refsource": "MISC",
"name": "https://www.drupal.org/SA-CORE-2016-003"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1353794",
"refsource": "MISC",
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1353794"
}
]
}
}
Reference in New Issue View Git Blame Copy Permalink