UpHeron
All vulnerabilities

Servers and applications

CVE-2014-5459

The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions.

Severity
Low 3.6
Published
27 Sept 2014
Last changed
17 Jun 2026
Added to UpHeron
14 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
PHPServers and applications · cpe:a:php:php
  • Every version up to 5.6.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2014-5459
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2014-5459