CVE-2013-1635: ext/soap/soap.c in PHP before 5.3.22 and 5.4.x… (CVSS 7.5)

Description

ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive, which allows remote attackers to bypass intended access restrictions by triggering the creation of cached SOAP WSDL files in an arbitrary directory.

Exploit likelihood

9.37%Up 5.6 points since Feb 4, 2022

Affected products

php

Affected packages

Affected packages
Package	Affected	Fixed
`php5` Debian:6.0 From an advisory covering 3 CVEs	before 5.3.3-7+squeeze15, plus listed versions 5.3.3-75.3.3-7+squeeze15.3.3-7+squeeze135.3.3-7+squeeze145.3.3-7+squeeze2 Show 6 moreShow less 5.3.3-7+squeeze35.3.3-7+squeeze55.3.3-7+squeeze65.3.3-7+squeeze75.3.3-7+squeeze85.3.3-7+squeeze9	5.3.3-7+squeeze15
`php7` openSUSE:Tumbleweed From an advisory covering 70 CVEs	before 7.0.14-1.4	7.0.14-1.4
`php5` openSUSE:Tumbleweed From an advisory covering 71 CVEs	before 5.6.28-1.1	5.6.28-1.1
`php8` openSUSE:Tumbleweed From an advisory covering 97 CVEs	before 8.0.11-1.1	8.0.11-1.1

What each source reports

NVD Score used7.5

ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive, which allows remote attackers to bypass intended access restrictions by triggering the creation of cached SOAP WSDL files in an arbitrary directory.

Record: CVE-2013-1635
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-264
Updated: 2026-11-02

CVE ListNo score

ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive, which allows remote attackers to bypass intended access restrictions by triggering the creation of cached SOAP WSDL files in an arbitrary directory.

Record: CVE-2013-1635
Updated: 2026-11-02

EUVDEUVD-2013-1666No score

ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive, which allows remote attackers to bypass intended access restrictions by triggering the creation of cached SOAP WSDL files in an arbitrary directory.

Record: EUVD-2013-1666
Updated: 2026-11-03

GitHub AdvisoriesGHSA-jvjg-fjxw-6h9qNo score

ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship...

ext/soap/soap.c in PHP before 5.3.22 and 5.4.x before 5.4.13 does not validate the relationship between the soap.wsdl_cache_dir directive and the open_basedir directive, which allows remote attackers to bypass intended access restrictions by triggering the creation of cached SOAP WSDL files in an arbitrary directory.

Record: GHSA-jvjg-fjxw-6h9q
Updated: 2026-11-02

OSVBELL-CVE-2013-16357.5

CVE-2013-1635 does not affect BellSoft software