NuytsTech Security

CVE-2014-3981

by ·

acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file.

Date published : 2014-06-08

http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html

http://git.php.net/?p=php-src.git;a=commit;h=91bcadd85e20e50d3f8c2e9721327681640e6f16

Tags: