CVE-2014-0185
sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x...
CVE-2014-0185 is a high vulnerability (CVSS 7.2) in Php, published May 6, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.48%, the 42nd percentile. Fixed in php 5.4.28-1.mga3.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 0.48%EPSS, 42nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
5.4.28-1.mga3php +15 more
Description
sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php5Debian:7 From an advisory covering 4 CVEs | before 5.4.4-14+deb7u10, plus listed versions 5.4.4-145.4.4-14+deb7u15.4.4-14+deb7u25.4.4-14+deb7u35.4.4-14+deb7u4 Show 4 moreShow less5.4.4-14+deb7u55.4.4-14+deb7u75.4.4-14+deb7u85.4.4-14+deb7u9 | 5.4.4-14+deb7u10 |
phpMageia:3 | before 5.4.28-1.mga3 | 5.4.28-1.mga3 |
php-gd-bundledMageia:3 | before 5.4.28-1.mga3 | 5.4.28-1.mga3 |
php-apcMageia:3 | before 3.1.14-7.8.mga3 | 3.1.14-7.8.mga3 |
php-suhosinMageia:3 | before 0.9.35-1.mga3 | 0.9.35-1.mga3 |
php-timezonedbMageia:3 | before 2014.3-1.mga3 | 2014.3-1.mga3 |
phpMageia:4 | before 5.5.12-1.mga4 | 5.5.12-1.mga4 |
php-apcMageia:4 | before 3.1.15-4.3.mga4 | 3.1.15-4.3.mga4 |
php-suhosinMageia:4 | before 0.9.35-1.mga4 | 0.9.35-1.mga4 |
php-timezonedbMageia:4 | before 2014.3-1.mga4 | 2014.3-1.mga4 |
Show 6 moreShow less
| Package | Affected | Fixed |
|---|---|---|
php5Ubuntu:14.04:LTS | before 5.5.9+dfsg-1ubuntu4.1, plus listed versions 5.5.3+dfsg-1ubuntu25.5.3+dfsg-1ubuntu35.5.6+dfsg-1ubuntu15.5.6+dfsg-1ubuntu25.5.8+dfsg-2ubuntu1 Show 4 moreShow less5.5.9+dfsg-1ubuntu15.5.9+dfsg-1ubuntu25.5.9+dfsg-1ubuntu35.5.9+dfsg-1ubuntu4 | 5.5.9+dfsg-1ubuntu4.1 |
php5Ubuntu:14.04:LTS From an advisory covering 4 CVEs | before 5.5.9+dfsg-1ubuntu4.1, plus listed versions 5.5.3+dfsg-1ubuntu25.5.3+dfsg-1ubuntu35.5.6+dfsg-1ubuntu15.5.6+dfsg-1ubuntu25.5.8+dfsg-2ubuntu1 Show 4 moreShow less5.5.9+dfsg-1ubuntu15.5.9+dfsg-1ubuntu25.5.9+dfsg-1ubuntu35.5.9+dfsg-1ubuntu4 | 5.5.9+dfsg-1ubuntu4.1 |
php7openSUSE:Tumbleweed From an advisory covering 70 CVEs | before 7.0.14-1.4 | 7.0.14-1.4 |
php5openSUSE:Tumbleweed From an advisory covering 71 CVEs | before 5.6.28-1.1 | 5.6.28-1.1 |
froxloropenSUSE:Tumbleweed | before 0.9.38.4-1.1 | 0.9.38.4-1.1 |
php8openSUSE:Tumbleweed From an advisory covering 97 CVEs | before 8.0.11-1.1 | 8.0.11-1.1 |
What each source reports
NVD Score used
sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client.
- Record
CVE-2014-0185- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-269
- Updated
- 2026-11-02
CVE ListNo score
sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client.
- Record
CVE-2014-0185- Updated
- 2026-11-02
EUVDEUVD-2014-0237No score
sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client.
- Record
EUVD-2014-0237- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g7xr-pqqf-vpjwNo score
sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x...
sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client.
- Record
GHSA-g7xr-pqqf-vpjw- Weakness
- CWE-269
- Updated
- 2026-11-02
OSVMGASA-2014-0215No score
Updated php packages fix CVE-2014-0185
Updated php packages fix security vulnerability:
PHP FPM in PHP versions before 5.4.28 and 5.5.12 uses a UNIX domain socket with world-writable permissions by default, which allows any local user to connect to it and execute PHP scripts as the apache user (CVE-2014-0185).
Additionally updated php-suhosin package corrects an issue which could cause a segfault in apache. Also updated is php-timezonedb.
- Record
MGASA-2014-0215- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10290-1No score
apache2-mod_php7-7.0.14-1.4 on GA media
These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10290-1- Updated
- 2026-11-02
Show 5 moreShow less
OSVopenSUSE-SU-2024:10344-1No score
apache2-mod_php5-5.6.28-1.1 on GA media
These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10344-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10487-1No score
froxlor-0.9.38.4-1.1 on GA media
These are all security issues fixed in the froxlor-0.9.38.4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10487-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11169-1No score
php8-8.0.11-1.1 on GA media
These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11169-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-0185No score
sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client.
- Record
UBUNTU-CVE-2014-0185- Updated
- 2026-11-02
OSVUSN-2254-1No score
php5 vulnerabilities
Christian Hoffmann discovered that the PHP FastCGI Process Manager (FPM) set incorrect permissions on the UNIX socket. A local attacker could use this issue to possibly elevate their privileges. This issue only affected Ubuntu 12.04 LTS, Ubuntu 13.10, and Ubuntu 14.04 LTS. (CVE-2014-0185)
Francisco Alonso discovered that the PHP Fileinfo component incorrectly handled certain CDF documents. A remote attacker could use this issue to cause PHP to hang or crash, resulting in a denial of service. (CVE-2014-0237, CVE-2014-0238)
Stefan Esser discovered that PHP incorrectly handled DNS TXT records. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2014-4049)
- Record
USN-2254-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/59329
github.com/php/php-src/commit/35ceea928b12373a3b1e3eecdc32ed323223a40d
hoffmann-christian.info/files/php-fpm/0001-Fix-bug-67060-use-default-mode-of-660.patch
bugs.launchpad.net/ubuntu/+source/php5/+bug/1307027
bugs.php.net/bug.php?id=67060
Show 132 moreShow less
php.net/ChangeLog-5.php
support.apple.com/kb/HT6443
openwall.com/lists/oss-security/2014/04/29/5
bugzilla.redhat.com/show_bug.cgi?id=1092815
lists.opensuse.org/opensuse-updates/2015-10/msg00012.html
nvd.nist.gov/vuln/detail/CVE-2014-0185
advisories.mageia.org/MGASA-2014-0215.html
lists.fedoraproject.org/pipermail/package-announce/2014-May/132546.html
bugs.mageia.org/show_bug.cgi?id=13290
ubuntu.com/security/CVE-2014-0185
cve.org/CVERecord?id=CVE-2014-0185
suse.com/security/cve/CVE-2006-7243