CVE-2014-3981
acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to...
acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file.
Exploit likelihood
What each source reports
NVD Score used
acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file.
- Record
CVE-2014-3981- CVSS 2.0
- 3.3 Low
AV:L/AC:M/Au:N/C:N/I:P/A:P - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file.
- Record
CVE-2014-3981- Updated
- 2026-11-02
EUVDEUVD-2014-3914 No score
acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file.
- Record
EUVD-2014-3914- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j5j6-54xj-x4jx No score
acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to...
acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file.
- Record
GHSA-j5j6-54xj-x4jx- Weakness
- CWE-59
- Updated
- 2026-11-02
OSVBELL-CVE-2014-3981
CVE-2014-3981 does not affect BellSoft software
- Record
BELL-CVE-2014-3981- CVSS 2.0
- 3.3 Low
AV:L/AC:M/Au:N/C:N/I:P/A:P - Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-3981 is a low vulnerability (CVSS 3.3) in Php, published June 8, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.78%, the 56th percentile. No source names a fixed version.
References
support.apple.com/HT204659
www-01.ibm.com/support/docview.wss?uid=swg21683486
marc.info?l=bugtraq&m=141017844705317&w=2
bugs.php.net/bug.php?id=67390
bugzilla.redhat.com/show_bug.cgi?id=1104978
Show 10 moreShow less
lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
seclists.org/fulldisclosure/2014/Jun/21
openwall.com/lists/oss-security/2014/06/06/12
git.php.net?p=php-src.git%3Ba=commit%3Bh=91bcadd85e20e50d3f8c2e9721327681640e6f16
nvd.nist.gov/vuln/detail/CVE-2014-3981
github.com/advisories/GHSA-j5j6-54xj-x4jx
docs.bell-sw.com/security/cves/CVE-2014-3981