CVEs-PoC/2014/CVE-2014-3981.md

CVE-2014-3981

Description

acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
• http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html

Github

• https://github.com/Live-Hack-CVE/CVE-2014-3981