mirror of
https://github.com/0xMarcio/cve.git
synced 2026-03-29 16:20:47 +02:00
772 B
772 B
CVE-2014-0185
Description
sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client.
POC
Reference
Github
No PoCs found on GitHub currently.