Details of VAR-201607-0657

ID

VAR-201607-0657

CVE

CVE-2016-5385

TITLE

CGI web servers assign Proxy header values from client requests to internal HTTP_PROXY environment variables

Trust: 0.8

sources: CERT/CC: VU#797896

DESCRIPTION

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue. Web servers running in a CGI or CGI-like context may assign client request Proxy header values to internal HTTP_PROXY environment variables. This vulnerability can be leveraged to conduct man-in-the-middle (MITM) attacks on internal subrequests or to direct the server to initiate connections to arbitrary hosts. PHP is prone to a security-bypass vulnerability. Successfully exploiting this issue may allow attackers to perform unauthorized actions. This may lead to other attacks. PHP (PHP: Hypertext Preprocessor, PHP: Hypertext Preprocessor) is an open source general-purpose computer scripting language jointly maintained by the PHP Group and the open source community. The language is mainly used for Web development and supports a variety of databases and operating systems. There is a security vulnerability in PHP 7.0.8 and earlier versions, the vulnerability stems from the fact that the program does not resolve namespace conflicts in RFC 3875 mode. The program does not properly handle data from untrusted client applications in the HTTP_PROXY environment variable. A remote attacker uses the specially crafted Proxy header message in the HTTP request to exploit this vulnerability to implement a man-in-the-middle attack, directing the server to send a connection to any host. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ===================================================================== Red Hat Security Advisory Synopsis: Moderate: php54-php security update Advisory ID: RHSA-2016:1610-01 Product: Red Hat Software Collections Advisory URL: https://rhn.redhat.com/errata/RHSA-2016-1610.html Issue date: 2016-08-11 CVE Names: CVE-2016-5385 ===================================================================== 1. Summary: An update for php54-php is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - x86_64 3. Description: PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fix(es): * It was discovered that PHP did not properly protect against the HTTP_PROXY variable name clash. A remote attacker could possibly use this flaw to redirect HTTP requests performed by a PHP script to an attacker-controlled proxy via a malicious HTTP request. (CVE-2016-5385) Red Hat would like to thank Scott Geary (VendHQ) for reporting this issue. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon must be restarted for the update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1353794 - CVE-2016-5385 PHP: sets environmental variable based on user supplied Proxy request header 6. Package List: Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6): Source: php54-php-5.4.40-4.el6.src.rpm x86_64: php54-php-5.4.40-4.el6.x86_64.rpm php54-php-bcmath-5.4.40-4.el6.x86_64.rpm php54-php-cli-5.4.40-4.el6.x86_64.rpm php54-php-common-5.4.40-4.el6.x86_64.rpm php54-php-dba-5.4.40-4.el6.x86_64.rpm php54-php-debuginfo-5.4.40-4.el6.x86_64.rpm php54-php-devel-5.4.40-4.el6.x86_64.rpm php54-php-enchant-5.4.40-4.el6.x86_64.rpm php54-php-fpm-5.4.40-4.el6.x86_64.rpm php54-php-gd-5.4.40-4.el6.x86_64.rpm php54-php-imap-5.4.40-4.el6.x86_64.rpm php54-php-intl-5.4.40-4.el6.x86_64.rpm php54-php-ldap-5.4.40-4.el6.x86_64.rpm php54-php-mbstring-5.4.40-4.el6.x86_64.rpm php54-php-mysqlnd-5.4.40-4.el6.x86_64.rpm php54-php-odbc-5.4.40-4.el6.x86_64.rpm php54-php-pdo-5.4.40-4.el6.x86_64.rpm php54-php-pgsql-5.4.40-4.el6.x86_64.rpm php54-php-process-5.4.40-4.el6.x86_64.rpm php54-php-pspell-5.4.40-4.el6.x86_64.rpm php54-php-recode-5.4.40-4.el6.x86_64.rpm php54-php-snmp-5.4.40-4.el6.x86_64.rpm php54-php-soap-5.4.40-4.el6.x86_64.rpm php54-php-tidy-5.4.40-4.el6.x86_64.rpm php54-php-xml-5.4.40-4.el6.x86_64.rpm php54-php-xmlrpc-5.4.40-4.el6.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6): Source: php54-php-5.4.40-4.el6.src.rpm x86_64: php54-php-5.4.40-4.el6.x86_64.rpm php54-php-bcmath-5.4.40-4.el6.x86_64.rpm php54-php-cli-5.4.40-4.el6.x86_64.rpm php54-php-common-5.4.40-4.el6.x86_64.rpm php54-php-dba-5.4.40-4.el6.x86_64.rpm php54-php-debuginfo-5.4.40-4.el6.x86_64.rpm php54-php-devel-5.4.40-4.el6.x86_64.rpm php54-php-enchant-5.4.40-4.el6.x86_64.rpm php54-php-fpm-5.4.40-4.el6.x86_64.rpm php54-php-gd-5.4.40-4.el6.x86_64.rpm php54-php-imap-5.4.40-4.el6.x86_64.rpm php54-php-intl-5.4.40-4.el6.x86_64.rpm php54-php-ldap-5.4.40-4.el6.x86_64.rpm php54-php-mbstring-5.4.40-4.el6.x86_64.rpm php54-php-mysqlnd-5.4.40-4.el6.x86_64.rpm php54-php-odbc-5.4.40-4.el6.x86_64.rpm php54-php-pdo-5.4.40-4.el6.x86_64.rpm php54-php-pgsql-5.4.40-4.el6.x86_64.rpm php54-php-process-5.4.40-4.el6.x86_64.rpm php54-php-pspell-5.4.40-4.el6.x86_64.rpm php54-php-recode-5.4.40-4.el6.x86_64.rpm php54-php-snmp-5.4.40-4.el6.x86_64.rpm php54-php-soap-5.4.40-4.el6.x86_64.rpm php54-php-tidy-5.4.40-4.el6.x86_64.rpm php54-php-xml-5.4.40-4.el6.x86_64.rpm php54-php-xmlrpc-5.4.40-4.el6.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7): Source: php54-php-5.4.40-4.el6.src.rpm x86_64: php54-php-5.4.40-4.el6.x86_64.rpm php54-php-bcmath-5.4.40-4.el6.x86_64.rpm php54-php-cli-5.4.40-4.el6.x86_64.rpm php54-php-common-5.4.40-4.el6.x86_64.rpm php54-php-dba-5.4.40-4.el6.x86_64.rpm php54-php-debuginfo-5.4.40-4.el6.x86_64.rpm php54-php-devel-5.4.40-4.el6.x86_64.rpm php54-php-enchant-5.4.40-4.el6.x86_64.rpm php54-php-fpm-5.4.40-4.el6.x86_64.rpm php54-php-gd-5.4.40-4.el6.x86_64.rpm php54-php-imap-5.4.40-4.el6.x86_64.rpm php54-php-intl-5.4.40-4.el6.x86_64.rpm php54-php-ldap-5.4.40-4.el6.x86_64.rpm php54-php-mbstring-5.4.40-4.el6.x86_64.rpm php54-php-mysqlnd-5.4.40-4.el6.x86_64.rpm php54-php-odbc-5.4.40-4.el6.x86_64.rpm php54-php-pdo-5.4.40-4.el6.x86_64.rpm php54-php-pgsql-5.4.40-4.el6.x86_64.rpm php54-php-process-5.4.40-4.el6.x86_64.rpm php54-php-pspell-5.4.40-4.el6.x86_64.rpm php54-php-recode-5.4.40-4.el6.x86_64.rpm php54-php-snmp-5.4.40-4.el6.x86_64.rpm php54-php-soap-5.4.40-4.el6.x86_64.rpm php54-php-tidy-5.4.40-4.el6.x86_64.rpm php54-php-xml-5.4.40-4.el6.x86_64.rpm php54-php-xmlrpc-5.4.40-4.el6.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6): Source: php54-php-5.4.40-4.el6.src.rpm x86_64: php54-php-5.4.40-4.el6.x86_64.rpm php54-php-bcmath-5.4.40-4.el6.x86_64.rpm php54-php-cli-5.4.40-4.el6.x86_64.rpm php54-php-common-5.4.40-4.el6.x86_64.rpm php54-php-dba-5.4.40-4.el6.x86_64.rpm php54-php-debuginfo-5.4.40-4.el6.x86_64.rpm php54-php-devel-5.4.40-4.el6.x86_64.rpm php54-php-enchant-5.4.40-4.el6.x86_64.rpm php54-php-fpm-5.4.40-4.el6.x86_64.rpm php54-php-gd-5.4.40-4.el6.x86_64.rpm php54-php-imap-5.4.40-4.el6.x86_64.rpm php54-php-intl-5.4.40-4.el6.x86_64.rpm php54-php-ldap-5.4.40-4.el6.x86_64.rpm php54-php-mbstring-5.4.40-4.el6.x86_64.rpm php54-php-mysqlnd-5.4.40-4.el6.x86_64.rpm php54-php-odbc-5.4.40-4.el6.x86_64.rpm php54-php-pdo-5.4.40-4.el6.x86_64.rpm php54-php-pgsql-5.4.40-4.el6.x86_64.rpm php54-php-process-5.4.40-4.el6.x86_64.rpm php54-php-pspell-5.4.40-4.el6.x86_64.rpm php54-php-recode-5.4.40-4.el6.x86_64.rpm php54-php-snmp-5.4.40-4.el6.x86_64.rpm php54-php-soap-5.4.40-4.el6.x86_64.rpm php54-php-tidy-5.4.40-4.el6.x86_64.rpm php54-php-xml-5.4.40-4.el6.x86_64.rpm php54-php-xmlrpc-5.4.40-4.el6.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7): Source: php54-php-5.4.40-4.el7.src.rpm x86_64: php54-php-5.4.40-4.el7.x86_64.rpm php54-php-bcmath-5.4.40-4.el7.x86_64.rpm php54-php-cli-5.4.40-4.el7.x86_64.rpm php54-php-common-5.4.40-4.el7.x86_64.rpm php54-php-dba-5.4.40-4.el7.x86_64.rpm php54-php-debuginfo-5.4.40-4.el7.x86_64.rpm php54-php-devel-5.4.40-4.el7.x86_64.rpm php54-php-enchant-5.4.40-4.el7.x86_64.rpm php54-php-fpm-5.4.40-4.el7.x86_64.rpm php54-php-gd-5.4.40-4.el7.x86_64.rpm php54-php-intl-5.4.40-4.el7.x86_64.rpm php54-php-ldap-5.4.40-4.el7.x86_64.rpm php54-php-mbstring-5.4.40-4.el7.x86_64.rpm php54-php-mysqlnd-5.4.40-4.el7.x86_64.rpm php54-php-odbc-5.4.40-4.el7.x86_64.rpm php54-php-pdo-5.4.40-4.el7.x86_64.rpm php54-php-pgsql-5.4.40-4.el7.x86_64.rpm php54-php-process-5.4.40-4.el7.x86_64.rpm php54-php-pspell-5.4.40-4.el7.x86_64.rpm php54-php-recode-5.4.40-4.el7.x86_64.rpm php54-php-snmp-5.4.40-4.el7.x86_64.rpm php54-php-soap-5.4.40-4.el7.x86_64.rpm php54-php-xml-5.4.40-4.el7.x86_64.rpm php54-php-xmlrpc-5.4.40-4.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1): Source: php54-php-5.4.40-4.el7.src.rpm x86_64: php54-php-5.4.40-4.el7.x86_64.rpm php54-php-bcmath-5.4.40-4.el7.x86_64.rpm php54-php-cli-5.4.40-4.el7.x86_64.rpm php54-php-common-5.4.40-4.el7.x86_64.rpm php54-php-dba-5.4.40-4.el7.x86_64.rpm php54-php-debuginfo-5.4.40-4.el7.x86_64.rpm php54-php-devel-5.4.40-4.el7.x86_64.rpm php54-php-enchant-5.4.40-4.el7.x86_64.rpm php54-php-fpm-5.4.40-4.el7.x86_64.rpm php54-php-gd-5.4.40-4.el7.x86_64.rpm php54-php-intl-5.4.40-4.el7.x86_64.rpm php54-php-ldap-5.4.40-4.el7.x86_64.rpm php54-php-mbstring-5.4.40-4.el7.x86_64.rpm php54-php-mysqlnd-5.4.40-4.el7.x86_64.rpm php54-php-odbc-5.4.40-4.el7.x86_64.rpm php54-php-pdo-5.4.40-4.el7.x86_64.rpm php54-php-pgsql-5.4.40-4.el7.x86_64.rpm php54-php-process-5.4.40-4.el7.x86_64.rpm php54-php-pspell-5.4.40-4.el7.x86_64.rpm php54-php-recode-5.4.40-4.el7.x86_64.rpm php54-php-snmp-5.4.40-4.el7.x86_64.rpm php54-php-soap-5.4.40-4.el7.x86_64.rpm php54-php-xml-5.4.40-4.el7.x86_64.rpm php54-php-xmlrpc-5.4.40-4.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2): Source: php54-php-5.4.40-4.el7.src.rpm x86_64: php54-php-5.4.40-4.el7.x86_64.rpm php54-php-bcmath-5.4.40-4.el7.x86_64.rpm php54-php-cli-5.4.40-4.el7.x86_64.rpm php54-php-common-5.4.40-4.el7.x86_64.rpm php54-php-dba-5.4.40-4.el7.x86_64.rpm php54-php-debuginfo-5.4.40-4.el7.x86_64.rpm php54-php-devel-5.4.40-4.el7.x86_64.rpm php54-php-enchant-5.4.40-4.el7.x86_64.rpm php54-php-fpm-5.4.40-4.el7.x86_64.rpm php54-php-gd-5.4.40-4.el7.x86_64.rpm php54-php-intl-5.4.40-4.el7.x86_64.rpm php54-php-ldap-5.4.40-4.el7.x86_64.rpm php54-php-mbstring-5.4.40-4.el7.x86_64.rpm php54-php-mysqlnd-5.4.40-4.el7.x86_64.rpm php54-php-odbc-5.4.40-4.el7.x86_64.rpm php54-php-pdo-5.4.40-4.el7.x86_64.rpm php54-php-pgsql-5.4.40-4.el7.x86_64.rpm php54-php-process-5.4.40-4.el7.x86_64.rpm php54-php-pspell-5.4.40-4.el7.x86_64.rpm php54-php-recode-5.4.40-4.el7.x86_64.rpm php54-php-snmp-5.4.40-4.el7.x86_64.rpm php54-php-soap-5.4.40-4.el7.x86_64.rpm php54-php-xml-5.4.40-4.el7.x86_64.rpm php54-php-xmlrpc-5.4.40-4.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7): Source: php54-php-5.4.40-4.el7.src.rpm x86_64: php54-php-5.4.40-4.el7.x86_64.rpm php54-php-bcmath-5.4.40-4.el7.x86_64.rpm php54-php-cli-5.4.40-4.el7.x86_64.rpm php54-php-common-5.4.40-4.el7.x86_64.rpm php54-php-dba-5.4.40-4.el7.x86_64.rpm php54-php-debuginfo-5.4.40-4.el7.x86_64.rpm php54-php-devel-5.4.40-4.el7.x86_64.rpm php54-php-enchant-5.4.40-4.el7.x86_64.rpm php54-php-fpm-5.4.40-4.el7.x86_64.rpm php54-php-gd-5.4.40-4.el7.x86_64.rpm php54-php-intl-5.4.40-4.el7.x86_64.rpm php54-php-ldap-5.4.40-4.el7.x86_64.rpm php54-php-mbstring-5.4.40-4.el7.x86_64.rpm php54-php-mysqlnd-5.4.40-4.el7.x86_64.rpm php54-php-odbc-5.4.40-4.el7.x86_64.rpm php54-php-pdo-5.4.40-4.el7.x86_64.rpm php54-php-pgsql-5.4.40-4.el7.x86_64.rpm php54-php-process-5.4.40-4.el7.x86_64.rpm php54-php-pspell-5.4.40-4.el7.x86_64.rpm php54-php-recode-5.4.40-4.el7.x86_64.rpm php54-php-snmp-5.4.40-4.el7.x86_64.rpm php54-php-soap-5.4.40-4.el7.x86_64.rpm php54-php-xml-5.4.40-4.el7.x86_64.rpm php54-php-xmlrpc-5.4.40-4.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2016-5385 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2016 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFXrPSRXlSAg2UNWIIRAm7eAJ46bwD5dNGjO2qoFKsoL92xftbbTgCgkeMg 3r5SaIOUCU9fw1VuBLjTlPI= =fzN3 -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . The vulnerabilities are addressed by upgrading PHP to the new upstream version 5.6.24, which includes additional bug fixes. Please refer to the upstream changelog for more information: https://php.net/ChangeLog-5.php#5.6.24 For the stable distribution (jessie), these problems have been fixed in version 5.6.24+dfsg-0+deb8u1. For the unstable distribution (sid), these problems have been fixed in version 7.0.9-1 of the php7.0 source package. We recommend that you upgrade your php5 packages. Here are the details from the Slackware 14.2 ChangeLog: +--------------------------+ patches/packages/php-5.6.24-i586-1_slack14.2.txz: Upgraded. This release fixes bugs and security issues. For more information, see: http://php.net/ChangeLog-5.php#5.6.24 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5385 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6207 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 14.0: ftp://ftp.slackware.com/pub/slackware/slackware-14.0/patches/packages/php-5.6.24-i486-1_slack14.0.txz Updated package for Slackware x86_64 14.0: ftp://ftp.slackware.com/pub/slackware/slackware64-14.0/patches/packages/php-5.6.24-x86_64-1_slack14.0.txz Updated package for Slackware 14.1: ftp://ftp.slackware.com/pub/slackware/slackware-14.1/patches/packages/php-5.6.24-i486-1_slack14.1.txz Updated package for Slackware x86_64 14.1: ftp://ftp.slackware.com/pub/slackware/slackware64-14.1/patches/packages/php-5.6.24-x86_64-1_slack14.1.txz Updated package for Slackware 14.2: ftp://ftp.slackware.com/pub/slackware/slackware-14.2/patches/packages/php-5.6.24-i586-1_slack14.2.txz Updated package for Slackware x86_64 14.2: ftp://ftp.slackware.com/pub/slackware/slackware64-14.2/patches/packages/php-5.6.24-x86_64-1_slack14.2.txz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/php-5.6.24-i586-1.txz Updated package for Slackware x86_64 -current: ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/php-5.6.24-x86_64-1.txz MD5 signatures: +-------------+ Slackware 14.0 package: 712cc177c9ac10f3d58e871ff27260dc php-5.6.24-i486-1_slack14.0.txz Slackware x86_64 14.0 package: 47f6ad4a81517f5b2959abc73475742b php-5.6.24-x86_64-1_slack14.0.txz Slackware 14.1 package: aea6a8869946186781e55c5ecec952b0 php-5.6.24-i486-1_slack14.1.txz Slackware x86_64 14.1 package: ab16db742762605b9b219b37cdd7e8db php-5.6.24-x86_64-1_slack14.1.txz Slackware 14.2 package: c88a731667e741443712267d9b30286a php-5.6.24-i586-1_slack14.2.txz Slackware x86_64 14.2 package: ed5b31c94e2fb91f0e6c40051f51da1c php-5.6.24-x86_64-1_slack14.2.txz Slackware -current package: c25a85fece34101d35b8785022cef94d n/php-5.6.24-i586-1.txz Slackware x86_64 -current package: 17f8886fc0901cea6d593170ea00fe7b n/php-5.6.24-x86_64-1.txz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg php-5.6.24-i586-1_slack14.2.txz Then, restart Apache httpd: # /etc/rc.d/rc.httpd stop # /etc/rc.d/rc.httpd start +-----+ Slackware Linux Security Team http://slackware.com/gpg-key security@slackware.com +------------------------------------------------------------------------+ | To leave the slackware-security mailing list: | +------------------------------------------------------------------------+ | Send an email to majordomo@slackware.com with this text in the body of | | the email message: | | | | unsubscribe slackware-security | | | | You will get a confirmation message back containing instructions to | | complete the process. Please do not reply to this email address. Bug Fix(es): * Previously, an incorrect logic in the SAPI header callback routine caused that the callback counter was not incremented. Consequently, when a script included a header callback, it could terminate unexpectedly with a segmentation fault. With this update, the callback counter is properly managed, and scripts with a header callback implementation work as expected. (BZ#1346758) 4. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201611-22 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: PHP: Multiple vulnerabilities Date: November 30, 2016 Bugs: #578734, #581834, #584204, #587246, #591710, #594498, #597586, #599326 ID: 201611-22 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been found in PHP, the worst of which could lead to arbitrary code execution or cause a Denial of Service condition. Background ========== PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-lang/php < 5.6.28 >= 5.6.28 Description =========== Multiple vulnerabilities have been discovered in PHP. Please review the CVE identifiers referenced below for details. Impact ====== An attacker can possibly execute arbitrary code or create a Denial of Service condition. Workaround ========== There is no known workaround at this time. Resolution ========== All PHP users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=dev=lang/php-5.6.28" References ========== [ 1 ] CVE-2015-8865 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2015-8865 [ 2 ] CVE-2016-3074 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-3074 [ 3 ] CVE-2016-4071 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-4071 [ 4 ] CVE-2016-4072 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-4072 [ 5 ] CVE-2016-4073 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-4073 [ 6 ] CVE-2016-4537 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-4537 [ 7 ] CVE-2016-4538 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-4538 [ 8 ] CVE-2016-4539 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-4539 [ 9 ] CVE-2016-4540 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-4540 [ 10 ] CVE-2016-4541 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-4541 [ 11 ] CVE-2016-4542 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-4542 [ 12 ] CVE-2016-4543 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-4543 [ 13 ] CVE-2016-4544 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-4544 [ 14 ] CVE-2016-5385 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-5385 [ 15 ] CVE-2016-6289 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-6289 [ 16 ] CVE-2016-6290 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-6290 [ 17 ] CVE-2016-6291 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-6291 [ 18 ] CVE-2016-6292 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-6292 [ 19 ] CVE-2016-6294 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-6294 [ 20 ] CVE-2016-6295 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-6295 [ 21 ] CVE-2016-6296 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-6296 [ 22 ] CVE-2016-6297 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-6297 [ 23 ] CVE-2016-7124 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7124 [ 24 ] CVE-2016-7125 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7125 [ 25 ] CVE-2016-7126 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7126 [ 26 ] CVE-2016-7127 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7127 [ 27 ] CVE-2016-7128 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7128 [ 28 ] CVE-2016-7129 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7129 [ 29 ] CVE-2016-7130 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7130 [ 30 ] CVE-2016-7131 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7131 [ 31 ] CVE-2016-7132 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7132 [ 32 ] CVE-2016-7133 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7133 [ 33 ] CVE-2016-7134 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7134 [ 34 ] CVE-2016-7411 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7411 [ 35 ] CVE-2016-7412 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7412 [ 36 ] CVE-2016-7413 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7413 [ 37 ] CVE-2016-7414 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7414 [ 38 ] CVE-2016-7416 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7416 [ 39 ] CVE-2016-7417 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7417 [ 40 ] CVE-2016-7418 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2016-7418 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201611-22 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2016 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5

Trust: 2.7

sources: NVD: CVE-2016-5385 // CERT/CC: VU#797896 // BID: 91821 // VULHUB: VHN-94204 // VULMON: CVE-2016-5385 // PACKETSTORM: 138296 // PACKETSTORM: 138070 // PACKETSTORM: 138297 // PACKETSTORM: 138014 // PACKETSTORM: 138299 // PACKETSTORM: 138298 // PACKETSTORM: 139968

AFFECTED PRODUCTS

vendor:	oracle	model:	linux	scope:	eq	version:	6	Trust: 1.3
vendor:	oracle	model:	linux	scope:	eq	version:	7	Trust: 1.3
vendor:	oracle	model:	communications user data repository	scope:	eq	version:	10.0.1	Trust: 1.3
vendor:	opensuse	model:	leap	scope:	eq	version:	42.1	Trust: 1.0
vendor:	php	model:	php	scope:	lt	version:	5.5.38	Trust: 1.0
vendor:	oracle	model:	communications user data repository	scope:	eq	version:	12.0.0	Trust: 1.0
vendor:	php	model:	php	scope:	lt	version:	5.6.24	Trust: 1.0
vendor:	php	model:	php	scope:	lte	version:	7.0.8	Trust: 1.0
vendor:	redhat	model:	enterprise linux workstation	scope:	eq	version:	6.0	Trust: 1.0
vendor:	drupal	model:	drupal	scope:	lt	version:	8.1.7	Trust: 1.0
vendor:	fedoraproject	model:	fedora	scope:	eq	version:	23	Trust: 1.0
vendor:	php	model:	php	scope:	gte	version:	5.5.0	Trust: 1.0
vendor:	hp	model:	storeever msl6480 tape library	scope:	lte	version:	5.09	Trust: 1.0
vendor:	fedoraproject	model:	fedora	scope:	eq	version:	24	Trust: 1.0
vendor:	php	model:	php	scope:	gte	version:	5.6.0	Trust: 1.0
vendor:	hp	model:	system management homepage	scope:	lte	version:	7.5.5.0	Trust: 1.0
vendor:	oracle	model:	communications user data repository	scope:	eq	version:	10.0.0	Trust: 1.0
vendor:	redhat	model:	enterprise linux desktop	scope:	eq	version:	6.0	Trust: 1.0
vendor:	redhat	model:	enterprise linux server	scope:	eq	version:	6.0	Trust: 1.0
vendor:	debian	model:	linux	scope:	eq	version:	8.0	Trust: 1.0
vendor:	oracle	model:	enterprise manager ops center	scope:	eq	version:	12.3.2	Trust: 1.0
vendor:	php	model:	php	scope:	gte	version:	7.0.0	Trust: 1.0
vendor:	oracle	model:	enterprise manager ops center	scope:	eq	version:	12.2.2	Trust: 1.0
vendor:	drupal	model:	drupal	scope:	gte	version:	8.0.0	Trust: 1.0
vendor:	apache http server	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	go programming language	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	haproxy	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	hhvm	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	microsoft	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	python	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	the php group	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	lighttpd	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	nginx	model:	-	scope:	-	version:	-	Trust: 0.8
vendor:	oracle	model:	linux	scope:	eq	version:	7.0	Trust: 0.6
vendor:	hp	model:	storeever msl6480 tape library	scope:	eq	version:	0	Trust: 0.3
vendor:	hp	model:	storeever msl6480 tape library	scope:	eq	version:	4.90	Trust: 0.3
vendor:	hp	model:	system management homepage	scope:	eq	version:	7.2	Trust: 0.3
vendor:	ibm	model:	tealeaf customer experience on cloud network capture add-on	scope:	eq	version:	16.1.01	Trust: 0.3
vendor:	typo3	model:	typo3	scope:	eq	version:	8.1	Trust: 0.3
vendor:	ibm	model:	api connect	scope:	eq	version:	5.0.3.0	Trust: 0.3
vendor:	ibm	model:	smartcloud entry	scope:	eq	version:	2.3.0	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.1	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.8	Trust: 0.3
vendor:	ibm	model:	powerkvm	scope:	ne	version:	2.1.1.3-65.12	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.20	Trust: 0.3
vendor:	ibm	model:	powerkvm update	scope:	ne	version:	3.1.0.22	Trust: 0.3
vendor:	hp	model:	system management homepage	scope:	eq	version:	7.0	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	7.0.6	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.23	Trust: 0.3
vendor:	ibm	model:	smartcloud entry appliance fp	scope:	eq	version:	3.1.0.4	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.5	Trust: 0.3
vendor:	php	model:	php	scope:	ne	version:	7.0.9	Trust: 0.3
vendor:	ibm	model:	powerkvm	scope:	eq	version:	3.1	Trust: 0.3
vendor:	ibm	model:	powerkvm build	scope:	eq	version:	3.13	Trust: 0.3
vendor:	typo3	model:	typo3	scope:	ne	version:	8.2.1	Trust: 0.3
vendor:	hp	model:	system management homepage	scope:	ne	version:	7.6	Trust: 0.3
vendor:	ibm	model:	smartcloud entry appliance fix pack	scope:	eq	version:	2.24	Trust: 0.3
vendor:	hp	model:	storeever msl6480 tape library	scope:	eq	version:	4.40	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.14	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6	Trust: 0.3
vendor:	drupal	model:	drupal	scope:	eq	version:	8.0.1	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.4	Trust: 0.3
vendor:	hp	model:	system management homepage	scope:	eq	version:	7.5	Trust: 0.3
vendor:	ibm	model:	powerkvm sp3	scope:	eq	version:	2.1.1	Trust: 0.3
vendor:	ibm	model:	powerkvm build	scope:	eq	version:	2.1.165.4	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.2	Trust: 0.3
vendor:	ibm	model:	powerkvm build	scope:	eq	version:	2.1.165.6	Trust: 0.3
vendor:	drupal	model:	drupal	scope:	eq	version:	8.1.0	Trust: 0.3
vendor:	ibm	model:	powerkvm	scope:	eq	version:	2.1.1.3-65	Trust: 0.3
vendor:	ibm	model:	smartcloud entry appliance fi	scope:	eq	version:	2.2.0.4	Trust: 0.3
vendor:	typo3	model:	typo3	scope:	eq	version:	8.1.1	Trust: 0.3
vendor:	ibm	model:	powerkvm sp2	scope:	eq	version:	3.1	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	7.0.5	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	7.0	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.13	Trust: 0.3
vendor:	drupal	model:	drupal	scope:	eq	version:	8.1.5	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	7.0.1	Trust: 0.3
vendor:	guzzle	model:	guzzle	scope:	ne	version:	6.2.1	Trust: 0.3
vendor:	oracle	model:	communications user data repository	scope:	eq	version:	10.2	Trust: 0.3
vendor:	ibm	model:	powerkvm build	scope:	eq	version:	2.1.165.1	Trust: 0.3
vendor:	ibm	model:	smartcloud entry appliance fix pack	scope:	eq	version:	2.36	Trust: 0.3
vendor:	oracle	model:	solaris	scope:	eq	version:	11.3	Trust: 0.3
vendor:	drupal	model:	drupal	scope:	eq	version:	8.1.4	Trust: 0.3
vendor:	ibm	model:	powerkvm build	scope:	eq	version:	2.1.157	Trust: 0.3
vendor:	guzzle	model:	guzzle	scope:	eq	version:	5	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	7.0.8	Trust: 0.3
vendor:	ibm	model:	powerkvm update	scope:	eq	version:	3.1.0.21	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.7	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.21	Trust: 0.3
vendor:	drupal	model:	drupal	scope:	eq	version:	8.1.3	Trust: 0.3
vendor:	typo3	model:	typo3	scope:	eq	version:	8.0.1	Trust: 0.3
vendor:	ibm	model:	powerkvm build	scope:	eq	version:	3.12	Trust: 0.3
vendor:	drupal	model:	drupal	scope:	eq	version:	8.0	Trust: 0.3
vendor:	hp	model:	system management homepage	scope:	eq	version:	7.4	Trust: 0.3
vendor:	gentoo	model:	linux	scope:	-	version:	-	Trust: 0.3
vendor:	ibm	model:	powerkvm build	scope:	eq	version:	2.1.165.5	Trust: 0.3
vendor:	ibm	model:	powerkvm	scope:	eq	version:	3.1.0.2	Trust: 0.3
vendor:	ibm	model:	api connect	scope:	eq	version:	5.0.1.0	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	7.0.2	Trust: 0.3
vendor:	drupal	model:	drupal	scope:	eq	version:	8.0.3	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.10	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.6	Trust: 0.3
vendor:	drupal	model:	drupal	scope:	eq	version:	8.0.2	Trust: 0.3
vendor:	ibm	model:	api connect	scope:	eq	version:	5.0.2.0	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	7.0.3	Trust: 0.3
vendor:	ibm	model:	powerkvm sp1	scope:	eq	version:	3.1	Trust: 0.3
vendor:	guzzle	model:	guzzle	scope:	eq	version:	6	Trust: 0.3
vendor:	ibm	model:	smartcloud entry	scope:	eq	version:	2.4.0	Trust: 0.3
vendor:	php	model:	php	scope:	ne	version:	5.6.24	Trust: 0.3
vendor:	hp	model:	storeever msl6480 tape library	scope:	ne	version:	5.10	Trust: 0.3
vendor:	ibm	model:	smartcloud entry appliance fix pack	scope:	eq	version:	2.34	Trust: 0.3
vendor:	typo3	model:	typo3	scope:	eq	version:	8.0.0	Trust: 0.3
vendor:	drupal	model:	drupal	scope:	ne	version:	8.1.7	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.9	Trust: 0.3
vendor:	guzzle	model:	4.0.0-rc2	scope:	-	version:	-	Trust: 0.3
vendor:	ibm	model:	smartcloud entry appliance fix pack	scope:	eq	version:	2.26	Trust: 0.3
vendor:	ibm	model:	powerkvm build	scope:	eq	version:	2.1.165.7	Trust: 0.3
vendor:	drupal	model:	drupal	scope:	eq	version:	8.0.4	Trust: 0.3
vendor:	hp	model:	system management homepage	scope:	eq	version:	6.0	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.19	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.3	Trust: 0.3
vendor:	ibm	model:	smartcloud entry	scope:	eq	version:	3.2	Trust: 0.3
vendor:	ibm	model:	smartcloud entry appliance fi	scope:	eq	version:	2.4.0.4	Trust: 0.3
vendor:	ibm	model:	smartcloud entry	scope:	eq	version:	2.2	Trust: 0.3
vendor:	hp	model:	storeever msl6480 tape library	scope:	eq	version:	4.10	Trust: 0.3
vendor:	typo3	model:	typo3	scope:	eq	version:	8.2	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	7.0.4	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.11	Trust: 0.3
vendor:	hp	model:	system management homepage	scope:	eq	version:	7.3	Trust: 0.3
vendor:	ibm	model:	smartcloud entry appliance fp	scope:	eq	version:	3.2.0.4	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.18	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.17	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.22	Trust: 0.3
vendor:	ibm	model:	api connect	scope:	eq	version:	5.0.0.1	Trust: 0.3
vendor:	hp	model:	system management homepage	scope:	eq	version:	7.1	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	7.0.7	Trust: 0.3
vendor:	ibm	model:	smartcloud entry	scope:	eq	version:	3.1	Trust: 0.3
vendor:	oracle	model:	communications user data repository	scope:	eq	version:	12.0	Trust: 0.3
vendor:	ibm	model:	smartcloud entry appliance fi	scope:	eq	version:	2.3.0.4	Trust: 0.3
vendor:	ibm	model:	powerkvm	scope:	eq	version:	2.1.1.3-65.11	Trust: 0.3
vendor:	php	model:	php	scope:	eq	version:	5.6.12	Trust: 0.3
vendor:	guzzle	model:	guzzle	scope:	eq	version:	5.3	Trust: 0.3
vendor:	drupal	model:	drupal	scope:	eq	version:	8.1.6	Trust: 0.3
vendor:	oracle	model:	communications user data repository	scope:	eq	version:	10.0	Trust: 0.3
vendor:	ibm	model:	powerkvm build	scope:	eq	version:	2.1.158	Trust: 0.3
vendor:	ibm	model:	powerkvm	scope:	eq	version:	2.1.1.3-65.10	Trust: 0.3

sources: CERT/CC: VU#797896 // BID: 91821 // CNNVD: CNNVD-201607-538 // NVD: CVE-2016-5385

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2016-5385
value:	HIGH
Trust: 1.0
CNNVD:	CNNVD-201607-538
value:	HIGH
Trust: 0.6
VULHUB:	VHN-94204
value:	MEDIUM
Trust: 0.1
VULMON:	CVE-2016-5385
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2016-5385
severity:	MEDIUM
baseScore:	5.1
vectorString:	AV:N/AC:H/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	4.9
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.1
VULHUB:	VHN-94204
severity:	MEDIUM
baseScore:	5.1
vectorString:	AV:N/AC:H/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	HIGH
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	4.9
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2016-5385
baseSeverity:	HIGH
baseScore:	8.1
vectorString:	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	HIGH
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.2
impactScore:	5.9
version:	3.1
Trust: 1.0

sources: VULHUB: VHN-94204 // VULMON: CVE-2016-5385 // CNNVD: CNNVD-201607-538 // NVD: CVE-2016-5385

PROBLEMTYPE DATA

problemtype:	CWE-601	Trust: 1.1
problemtype:	CWE-284	Trust: 0.1

sources: VULHUB: VHN-94204 // NVD: CVE-2016-5385

THREAT TYPE

remote

Trust: 1.0

sources: PACKETSTORM: 138296 // PACKETSTORM: 138297 // PACKETSTORM: 138299 // PACKETSTORM: 138298 // CNNVD: CNNVD-201607-538

TYPE

input validation error

Trust: 0.6

sources: CNNVD: CNNVD-201607-538

EXPLOIT AVAILABILITY

sources: VULHUB: VHN-94204

PATCH

title:	PHP CGI Web server httpoxy Security vulnerabilities	url:	http://123.124.177.30/web/xxk/bdxqById.tag?id=62998	Trust: 0.6
title:	The Register	url:	https://www.theregister.co.uk/2016/07/18/httpoxy_hole/	Trust: 0.2
title:	Amazon Linux AMI: ALAS-2016-728	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux_ami&qid=ALAS-2016-728	Trust: 0.1
title:	Ubuntu Security Notice: php5, php7.0 vulnerabilities	url:	https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice&qid=USN-3045-1	Trust: 0.1
title:	Oracle Solaris Third Party Bulletins: Oracle Solaris Third Party Bulletin - July 2017	url:	https://vulmon.com/vendoradvisory?qidtp=oracle_solaris_third_party_bulletins&qid=a22ad41e97bbfc5abb0bb927bf43089c	Trust: 0.1
title:	Forcepoint Security Advisories: HTTPoxy CGI HTTP_PROXY Variable Multiple Vulnerabilities	url:	https://vulmon.com/vendoradvisory?qidtp=forcepoint_security_advisories&qid=47734ce563632c9864b0b698ae37ddf9	Trust: 0.1
title:	Oracle: Oracle Critical Patch Update Advisory - July 2017	url:	https://vulmon.com/vendoradvisory?qidtp=oracle_advisories&qid=2f446a7e1ea263c0c3a365776c6713f2	Trust: 0.1
title:	Oracle Linux Bulletins: Oracle Linux Bulletin - July 2016	url:	https://vulmon.com/vendoradvisory?qidtp=oracle_linux_bulletins&qid=0bd8c924b56aac98dda0f5b45f425f38	Trust: 0.1
title:	Oracle: Oracle Critical Patch Update Advisory - January 2018	url:	https://vulmon.com/vendoradvisory?qidtp=oracle_advisories&qid=e2a7f287e9acc8c64ab3df71130bc64d	Trust: 0.1
title:	bach	url:	https://github.com/sonatype-nexus-community/bach	Trust: 0.1
title:	bach	url:	https://github.com/OSSIndex/bach	Trust: 0.1
title:	-	url:	https://github.com/Live-Hack-CVE/CVE-2016-5385	Trust: 0.1
title:	jbot	url:	https://github.com/jschauma/jbot	Trust: 0.1
title:	CVE-2016-5385	url:	https://github.com/AIPOCAI/CVE-2016-5385	Trust: 0.1
title:	nginx-proxy	url:	https://github.com/chaplean/nginx-proxy	Trust: 0.1
title:	nginx-proxy2	url:	https://github.com/corzel/nginx-proxy2	Trust: 0.1
title:	Test	url:	https://github.com/Abhinav4git/Test	Trust: 0.1
title:	nginx-proxy	url:	https://github.com/jwilder/nginx-proxy	Trust: 0.1
title:	-	url:	https://github.com/GloveofGames/hehe	Trust: 0.1
title:	-	url:	https://github.com/jquepi/nginx-proxy-2	Trust: 0.1
title:	-	url:	https://github.com/lemonhope-mz/replica_nginx-proxy	Trust: 0.1
title:	reto-ejercicio1	url:	https://github.com/QuirianCordova/reto-ejercicio1	Trust: 0.1
title:	nginx	url:	https://github.com/ratika-web/nginx	Trust: 0.1
title:	docker-nginx-proxy	url:	https://github.com/CodeKoalas/docker-nginx-proxy	Trust: 0.1
title:	jwilder-nginx-proxy	url:	https://github.com/linguamerica/jwilder-nginx-proxy	Trust: 0.1
title:	nginx-proxy	url:	https://github.com/abhi1693/nginx-proxy	Trust: 0.1
title:	DockerProject	url:	https://github.com/antoinechab/DockerProject	Trust: 0.1
title:	plonevhost	url:	https://github.com/alteroo/plonevhost	Trust: 0.1
title:	nginx-proxy-docker-image-builder	url:	https://github.com/expoli/nginx-proxy-docker-image-builder	Trust: 0.1
title:	reto-ejercicio3	url:	https://github.com/QuirianCordova/reto-ejercicio3	Trust: 0.1
title:	nginx	url:	https://github.com/isaiahweeks/nginx	Trust: 0.1
title:	docker-dev-tools-proxy	url:	https://github.com/antimatter-studios/docker-dev-tools-proxy	Trust: 0.1
title:	nginx-proxy	url:	https://github.com/nginx-proxy/nginx-proxy	Trust: 0.1
title:	nginx-proxy	url:	https://github.com/bfirestone/nginx-proxy	Trust: 0.1
title:	nginx-oidc-proxy	url:	https://github.com/garnser/nginx-oidc-proxy	Trust: 0.1
title:	nginx-proxy	url:	https://github.com/VitasL/nginx-proxy	Trust: 0.1
title:	nginx-proxy-docker-image-builder	url:	https://github.com/expoli/nginx-proxy-docker-image	Trust: 0.1
title:	docker-proxy	url:	https://github.com/antimatter-studios/docker-proxy	Trust: 0.1
title:	nginx-proxy	url:	https://github.com/junkl-solbox/nginx-proxy	Trust: 0.1
title:	nginxProxy	url:	https://github.com/moewsystem/nginxProxy	Trust: 0.1
title:	kube-active-proxy	url:	https://github.com/adi90x/kube-active-proxy	Trust: 0.1
title:	nginx-proxy	url:	https://github.com/antimatter-studios/nginx-proxy	Trust: 0.1
title:	-	url:	https://github.com/6d617274696e73/nginx-waf-proxy	Trust: 0.1
title:	-	url:	https://github.com/mikediamanto/nginx-proxy	Trust: 0.1
title:	rancher-active-proxy	url:	https://github.com/adi90x/rancher-active-proxy	Trust: 0.1
title:	algm-php-vulnerability-checker	url:	https://github.com/timclifford/algm-php-vulnerability-checker	Trust: 0.1
title:	-	url:	https://github.com/t0m4too/t0m4to	Trust: 0.1
title:	github_aquasecurity_trivy	url:	https://github.com/back8/github_aquasecurity_trivy	Trust: 0.1
title:	TrivyWeb	url:	https://github.com/KorayAgaya/TrivyWeb	Trust: 0.1
title:	Vulnerability-Scanner-for-Containers	url:	https://github.com/t31m0/Vulnerability-Scanner-for-Containers	Trust: 0.1
title:	security	url:	https://github.com/umahari/security	Trust: 0.1
title:	-	url:	https://github.com/Mohzeela/external-secret	Trust: 0.1
title:	trivy	url:	https://github.com/simiyo/trivy	Trust: 0.1
title:	trivy	url:	https://github.com/aquasecurity/trivy	Trust: 0.1
title:	trivy	url:	https://github.com/knqyf263/trivy	Trust: 0.1
title:	trivy	url:	https://github.com/siddharthraopotukuchi/trivy	Trust: 0.1
title:	Threatpost	url:	https://threatpost.com/cgi-script-vulnerability-httpoxy-allows-man-in-the-middle-attacks/119345/	Trust: 0.1

sources: VULMON: CVE-2016-5385 // CNNVD: CNNVD-201607-538

EXTERNAL IDS

db:	CERT/CC	id:	VU#797896	Trust: 2.9
db:	NVD	id:	CVE-2016-5385	Trust: 2.8
db:	BID	id:	91821	Trust: 2.1
db:	SECTRACK	id:	1036335	Trust: 1.8
db:	CNNVD	id:	CNNVD-201607-538	Trust: 0.7
db:	PACKETSTORM	id:	138298	Trust: 0.2
db:	PACKETSTORM	id:	138299	Trust: 0.2
db:	PACKETSTORM	id:	138297	Trust: 0.2
db:	PACKETSTORM	id:	138014	Trust: 0.2
db:	PACKETSTORM	id:	138296	Trust: 0.2
db:	PACKETSTORM	id:	138070	Trust: 0.2
db:	PACKETSTORM	id:	138295	Trust: 0.1
db:	PACKETSTORM	id:	143933	Trust: 0.1
db:	PACKETSTORM	id:	139744	Trust: 0.1
db:	VULHUB	id:	VHN-94204	Trust: 0.1
db:	VULMON	id:	CVE-2016-5385	Trust: 0.1
db:	PACKETSTORM	id:	139968	Trust: 0.1

sources: CERT/CC: VU#797896 // VULHUB: VHN-94204 // VULMON: CVE-2016-5385 // BID: 91821 // PACKETSTORM: 138296 // PACKETSTORM: 138070 // PACKETSTORM: 138297 // PACKETSTORM: 138014 // PACKETSTORM: 138299 // PACKETSTORM: 138298 // PACKETSTORM: 139968 // CNNVD: CNNVD-201607-538 // NVD: CVE-2016-5385

REFERENCES

url:	http://www.securityfocus.com/bid/91821	Trust: 2.4
url:	http://www.debian.org/security/2016/dsa-3631	Trust: 2.4
url:	http://www.kb.cert.org/vuls/id/797896	Trust: 2.2
url:	http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html	Trust: 2.1
url:	http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html	Trust: 2.1
url:	https://bugzilla.redhat.com/show_bug.cgi?id=1353794	Trust: 2.1
url:	https://www.drupal.org/sa-core-2016-003	Trust: 2.1
url:	https://security.gentoo.org/glsa/201611-22	Trust: 1.9
url:	http://rhn.redhat.com/errata/rhsa-2016-1610.html	Trust: 1.9
url:	http://rhn.redhat.com/errata/rhsa-2016-1611.html	Trust: 1.9
url:	http://rhn.redhat.com/errata/rhsa-2016-1612.html	Trust: 1.9
url:	http://rhn.redhat.com/errata/rhsa-2016-1613.html	Trust: 1.9
url:	http://www.securitytracker.com/id/1036335	Trust: 1.8
url:	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/kzoiuyzdbwnddhc6xtolzyrmrxzwtjcp/	Trust: 1.8
url:	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7rmyxavnyl2mobjtfate73tovoezyc5r/	Trust: 1.8
url:	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/gxfeimzpsvgzqqayiq7u7dfvx3ibsdlf/	Trust: 1.8
url:	http://rhn.redhat.com/errata/rhsa-2016-1609.html	Trust: 1.8
url:	http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html	Trust: 1.8
url:	https://github.com/guzzle/guzzle/releases/tag/6.2.1	Trust: 1.8
url:	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docdisplay?docid=emr_na-c05320149	Trust: 1.8
url:	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docdisplay?docid=emr_na-c05333297	Trust: 1.8
url:	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docdisplay?docid=emr_na-c05390722	Trust: 1.8
url:	http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html	Trust: 1.8
url:	https://h20566.www2.hpe.com/hpsc/doc/public/display?doclocale=en_us&docid=emr_na-hpesbhf03770en_us	Trust: 1.7
url:	https://www.apache.org/security/asf-httpoxy-response.txt	Trust: 1.6
url:	https://httpoxy.org/	Trust: 1.2
url:	https://access.redhat.com/security/cve/cve-2016-5385	Trust: 1.0
url:	https://tools.ietf.org/html/rfc3875	Trust: 0.8
url:	https://httpoxy.org	Trust: 0.8
url:	https://cwe.mitre.org/data/definitions/807.html	Trust: 0.8
url:	https://cwe.mitre.org/data/definitions/454.html	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2016-5385	Trust: 0.7
url:	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7rmyxavnyl2mobjtfate73tovoezyc5r/	Trust: 0.6
url:	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/gxfeimzpsvgzqqayiq7u7dfvx3ibsdlf/	Trust: 0.6
url:	https://access.redhat.com/errata/rhsa-2016:1613	Trust: 0.6
url:	https://access.redhat.com/errata/rhsa-2016:1612	Trust: 0.6
url:	https://access.redhat.com/errata/rhsa-2016:1611	Trust: 0.6
url:	https://access.redhat.com/errata/rhsa-2016:1610	Trust: 0.6
url:	https://access.redhat.com/errata/rhsa-2016:1609	Trust: 0.6
url:	httpoxy.org/	Trust: 0.6
url:	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/kzoiuyzdbwnddhc6xtolzyrmrxzwtjcp/	Trust: 0.6
url:	https://www.redhat.com/mailman/listinfo/rhsa-announce	Trust: 0.4
url:	https://bugzilla.redhat.com/):	Trust: 0.4
url:	https://access.redhat.com/security/team/key/	Trust: 0.4
url:	https://access.redhat.com/articles/11258	Trust: 0.4
url:	https://access.redhat.com/security/updates/classification/#moderate	Trust: 0.4
url:	https://access.redhat.com/security/team/contact/	Trust: 0.4
url:	https://github.com/friendsofphp/security-advisories/commit/7ed8f8e3a87f7be13dd70cccd54f8701be1be6e0	Trust: 0.3
url:	http://www.php.net/	Trust: 0.3
url:	https://h20564.www2.hpe.com/hpsc/doc/public/display?docid=emr_na-c05320149	Trust: 0.3
url:	https://h20564.www2.hpe.com/hpsc/doc/public/display?docid=emr_na-c05333297	Trust: 0.3
url:	http://www-01.ibm.com/support/docview.wss?uid=isg3t1024261	Trust: 0.3
url:	http://www-01.ibm.com/support/docview.wss?uid=isg3t1024735	Trust: 0.3
url:	https://www.oracle.com/technetwork/topics/security/bulletinjul2017-3814622.html	Trust: 0.3
url:	http://www-01.ibm.com/support/docview.wss?uid=swg21993929	Trust: 0.3
url:	http://www.ibm.com/support/docview.wss?uid=swg21994534	Trust: 0.3
url:	https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2016-019/	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2016-6294	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2016-6289	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2016-6297	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2016-6291	Trust: 0.2
url:	https://php.net/changelog-5.php#5.6.24	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2016-6292	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2016-6295	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2016-6296	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2016-6290	Trust: 0.2
url:	https://h20566.www2.hpe.com/hpsc/doc/public/display?doclocale=en_us&docid=emr_na-hpesbhf03770en_us	Trust: 0.1
url:	https://cwe.mitre.org/data/definitions/601.html	Trust: 0.1
url:	https://github.com/sonatype-nexus-community/bach	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-5399	Trust: 0.1
url:	https://www.debian.org/security/faq	Trust: 0.1
url:	https://www.debian.org/security/	Trust: 0.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-5385	Trust: 0.1
url:	http://slackware.com	Trust: 0.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-6207	Trust: 0.1
url:	http://osuosl.org)	Trust: 0.1
url:	http://slackware.com/gpg-key	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-6207	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-6297	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7131	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7417	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-4537	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-3074	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-4542	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-7124	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7124	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7125	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7129	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-4538	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7132	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2015-8865	Trust: 0.1
url:	https://security.gentoo.org/	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-4538	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-4542	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-6292	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7416	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-7126	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-4544	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2015-8865	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-4072	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-6289	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7128	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-4073	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-4071	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-6296	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-5385	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-4539	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-4072	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-7128	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7134	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7411	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-4537	Trust: 0.1
url:	http://creativecommons.org/licenses/by-sa/2.5	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7413	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-4541	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7130	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-6290	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7414	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-4544	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-7127	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-4543	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-6294	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7126	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-4541	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-4071	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7133	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-6295	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-6291	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-4073	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-7125	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-4543	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-4540	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-4539	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-4540	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2016-7129	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7412	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7418	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-7127	Trust: 0.1
url:	https://bugs.gentoo.org.	Trust: 0.1
url:	http://nvd.nist.gov/nvd.cfm?cvename=cve-2016-3074	Trust: 0.1

CREDITS

Red Hat

Trust: 0.4

sources: PACKETSTORM: 138296 // PACKETSTORM: 138297 // PACKETSTORM: 138299 // PACKETSTORM: 138298

SOURCES

db:	CERT/CC	id:	VU#797896
db:	VULHUB	id:	VHN-94204
db:	VULMON	id:	CVE-2016-5385
db:	BID	id:	91821
db:	PACKETSTORM	id:	138296
db:	PACKETSTORM	id:	138070
db:	PACKETSTORM	id:	138297
db:	PACKETSTORM	id:	138014
db:	PACKETSTORM	id:	138299
db:	PACKETSTORM	id:	138298
db:	PACKETSTORM	id:	139968
db:	CNNVD	id:	CNNVD-201607-538
db:	NVD	id:	CVE-2016-5385

LAST UPDATE DATE

2025-04-26T21:48:53.961000+00:00

SOURCES UPDATE DATE

db:	CERT/CC	id:	VU#797896	date:	2016-07-19T00:00:00
db:	VULHUB	id:	VHN-94204	date:	2023-02-12T00:00:00
db:	VULMON	id:	CVE-2016-5385	date:	2023-02-12T00:00:00
db:	BID	id:	91821	date:	2018-01-18T09:00:00
db:	CNNVD	id:	CNNVD-201607-538	date:	2023-04-03T00:00:00
db:	NVD	id:	CVE-2016-5385	date:	2025-04-12T10:46:40.837

SOURCES RELEASE DATE

db:	CERT/CC	id:	VU#797896	date:	2016-07-18T00:00:00
db:	VULHUB	id:	VHN-94204	date:	2016-07-19T00:00:00
db:	VULMON	id:	CVE-2016-5385	date:	2016-07-19T00:00:00
db:	BID	id:	91821	date:	2016-07-18T00:00:00
db:	PACKETSTORM	id:	138296	date:	2016-08-12T18:03:00
db:	PACKETSTORM	id:	138070	date:	2016-07-27T14:25:39
db:	PACKETSTORM	id:	138297	date:	2016-08-12T18:03:14
db:	PACKETSTORM	id:	138014	date:	2016-07-22T22:42:48
db:	PACKETSTORM	id:	138299	date:	2016-08-12T18:03:29
db:	PACKETSTORM	id:	138298	date:	2016-08-12T18:03:22
db:	PACKETSTORM	id:	139968	date:	2016-12-01T16:38:01
db:	CNNVD	id:	CNNVD-201607-538	date:	2016-07-19T00:00:00
db:	NVD	id:	CVE-2016-5385	date:	2016-07-19T02:00:17.773