{"id":"CVE-2013-6501","aliases":["EUVD-2013-6304","GHSA-x247-pp49-3c7r","SUSE-SU-2015:0370-1","SUSE-SU-2015:0436-1","SUSE-SU-2015:1018-1","SUSE-SU-2015:1265-1","UBUNTU-CVE-2013-6501"],"status":"published","title":"The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in...","description":"The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.","severity":{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00583,"percentile":0.48121,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-74"],"published":"2014-10-28T10:05:33Z","modified":"2026-10-21T23:00:10Z","affected":[{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"php5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.5.3+dfsg-1ubuntu2","5.5.3+dfsg-1ubuntu3","5.5.6+dfsg-1ubuntu1","5.5.6+dfsg-1ubuntu2","5.5.8+dfsg-2ubuntu1","5.5.9+dfsg-1ubuntu1","5.5.9+dfsg-1ubuntu2","5.5.9+dfsg-1ubuntu3","5.5.9+dfsg-1ubuntu4","5.5.9+dfsg-1ubuntu4.1","5.5.9+dfsg-1ubuntu4.2","5.5.9+dfsg-1ubuntu4.3","5.5.9+dfsg-1ubuntu4.4","5.5.9+dfsg-1ubuntu4.5","5.5.9+dfsg-1ubuntu4.6","5.5.9+dfsg-1ubuntu4.7","5.5.9+dfsg-1ubuntu4.9","5.5.9+dfsg-1ubuntu4.11","5.5.9+dfsg-1ubuntu4.12","5.5.9+dfsg-1ubuntu4.13","5.5.9+dfsg-1ubuntu4.14","5.5.9+dfsg-1ubuntu4.16","5.5.9+dfsg-1ubuntu4.17","5.5.9+dfsg-1ubuntu4.19","5.5.9+dfsg-1ubuntu4.20","5.5.9+dfsg-1ubuntu4.21","5.5.9+dfsg-1ubuntu4.22","5.5.9+dfsg-1ubuntu4.23","5.5.9+dfsg-1ubuntu4.24","5.5.9+dfsg-1ubuntu4.25","5.5.9+dfsg-1ubuntu4.26","5.5.9+dfsg-1ubuntu4.27","5.5.9+dfsg-1ubuntu4.29","5.5.9+dfsg-1ubuntu4.29+esm1","5.5.9+dfsg-1ubuntu4.29+esm2","5.5.9+dfsg-1ubuntu4.29+esm3","5.5.9+dfsg-1ubuntu4.29+esm4","5.5.9+dfsg-1ubuntu4.29+esm5","5.5.9+dfsg-1ubuntu4.29+esm6","5.5.9+dfsg-1ubuntu4.29+esm8","5.5.9+dfsg-1ubuntu4.29+esm10","5.5.9+dfsg-1ubuntu4.29+esm11","5.5.9+dfsg-1ubuntu4.29+esm12","5.5.9+dfsg-1ubuntu4.29+esm13","5.5.9+dfsg-1ubuntu4.29+esm14","5.5.9+dfsg-1ubuntu4.29+esm15","5.5.9+dfsg-1ubuntu4.29+esm16","5.5.9+dfsg-1ubuntu4.29+esm17","5.5.9+dfsg-1ubuntu4.29+esm18"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"php7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.1-5","7.0.1-6","7.0.2-1","7.0.2-3","7.0.2-4","7.0.2-5","7.0.3-2","7.0.3-3","7.0.3-9ubuntu1","7.0.4-5ubuntu1","7.0.4-5ubuntu2","7.0.4-7ubuntu1","7.0.4-7ubuntu2","7.0.4-7ubuntu2.1","7.0.8-0ubuntu0.16.04.1","7.0.8-0ubuntu0.16.04.2","7.0.8-0ubuntu0.16.04.3","7.0.13-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.1","7.0.15-0ubuntu0.16.04.2","7.0.15-0ubuntu0.16.04.4","7.0.18-0ubuntu0.16.04.1","7.0.22-0ubuntu0.16.04.1","7.0.25-0ubuntu0.16.04.1","7.0.28-0ubuntu0.16.04.1","7.0.30-0ubuntu0.16.04.1","7.0.32-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.1","7.0.33-0ubuntu0.16.04.2","7.0.33-0ubuntu0.16.04.3","7.0.33-0ubuntu0.16.04.4","7.0.33-0ubuntu0.16.04.5","7.0.33-0ubuntu0.16.04.6","7.0.33-0ubuntu0.16.04.7","7.0.33-0ubuntu0.16.04.9","7.0.33-0ubuntu0.16.04.11","7.0.33-0ubuntu0.16.04.12","7.0.33-0ubuntu0.16.04.14","7.0.33-0ubuntu0.16.04.15","7.0.33-0ubuntu0.16.04.16","7.0.33-0ubuntu0.16.04.16+esm1","7.0.33-0ubuntu0.16.04.16+esm2","7.0.33-0ubuntu0.16.04.16+esm3","7.0.33-0ubuntu0.16.04.16+esm4","7.0.33-0ubuntu0.16.04.16+esm5","7.0.33-0ubuntu0.16.04.16+esm6","7.0.33-0ubuntu0.16.04.16+esm7","7.0.33-0ubuntu0.16.04.16+esm8","7.0.33-0ubuntu0.16.04.16+esm9","7.0.33-0ubuntu0.16.04.16+esm10","7.0.33-0ubuntu0.16.04.16+esm11","7.0.33-0ubuntu0.16.04.16+esm12","7.0.33-0ubuntu0.16.04.16+esm13","7.0.33-0ubuntu0.16.04.16+esm14","7.0.33-0ubuntu0.16.04.16+esm15","7.0.33-0ubuntu0.16.04.16+esm16","7.0.33-0ubuntu0.16.04.16+esm17","7.0.33-0ubuntu0.16.04.16+esm18","7.0.33-0ubuntu0.16.04.16+esm19","7.0.33-0ubuntu0.16.04.16+esm20","7.0.33-0ubuntu0.16.04.16+esm21","7.0.33-0ubuntu0.16.04.16+esm22"]}],"products":[{"vendor":"php","product":"php"},{"vendor":"suse","product":"linux_enterprise_server"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1009103","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00003.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.securityfocus.com/bid/72530","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201606-10","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6501"},{"url":"https://github.com/advisories/GHSA-x247-pp49-3c7r"},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150370-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/828020","tags":["report"]},{"url":"https://bugzilla.suse.com/829207","tags":["report"]},{"url":"https://bugzilla.suse.com/837746","tags":["report"]},{"url":"https://bugzilla.suse.com/842676","tags":["report"]},{"url":"https://bugzilla.suse.com/853045","tags":["report"]},{"url":"https://bugzilla.suse.com/854880","tags":["report"]},{"url":"https://bugzilla.suse.com/868624","tags":["report"]},{"url":"https://bugzilla.suse.com/880904","tags":["report"]},{"url":"https://bugzilla.suse.com/880905","tags":["report"]},{"url":"https://bugzilla.suse.com/882992","tags":["report"]},{"url":"https://bugzilla.suse.com/884986","tags":["report"]},{"url":"https://bugzilla.suse.com/884987","tags":["report"]},{"url":"https://bugzilla.suse.com/884989","tags":["report"]},{"url":"https://bugzilla.suse.com/884990","tags":["report"]},{"url":"https://bugzilla.suse.com/884991","tags":["report"]},{"url":"https://bugzilla.suse.com/884992","tags":["report"]},{"url":"https://bugzilla.suse.com/885961","tags":["report"]},{"url":"https://bugzilla.suse.com/886059","tags":["report"]},{"url":"https://bugzilla.suse.com/886060","tags":["report"]},{"url":"https://bugzilla.suse.com/893849","tags":["report"]},{"url":"https://bugzilla.suse.com/893853","tags":["report"]},{"url":"https://bugzilla.suse.com/902357","tags":["report"]},{"url":"https://bugzilla.suse.com/902360","tags":["report"]},{"url":"https://bugzilla.suse.com/902368","tags":["report"]},{"url":"https://bugzilla.suse.com/907519","tags":["report"]},{"url":"https://bugzilla.suse.com/910659","tags":["report"]},{"url":"https://bugzilla.suse.com/914690","tags":["report"]},{"url":"https://bugzilla.suse.com/917150","tags":["report"]},{"url":"https://bugzilla.suse.com/918768","tags":["report"]},{"url":"https://bugzilla.suse.com/919080","tags":["report"]},{"url":"https://bugzilla.suse.com/922022","tags":["report"]},{"url":"https://bugzilla.suse.com/922451","tags":["report"]},{"url":"https://bugzilla.suse.com/922452","tags":["report"]},{"url":"https://bugzilla.suse.com/923946","tags":["report"]},{"url":"https://bugzilla.suse.com/924972","tags":["report"]},{"url":"https://bugzilla.suse.com/925109","tags":["report"]},{"url":"https://bugzilla.suse.com/928506","tags":["report"]},{"url":"https://bugzilla.suse.com/928511","tags":["report"]},{"url":"https://bugzilla.suse.com/931421","tags":["report"]},{"url":"https://bugzilla.suse.com/931769","tags":["report"]},{"url":"https://bugzilla.suse.com/931772","tags":["report"]},{"url":"https://bugzilla.suse.com/931776","tags":["report"]},{"url":"https://bugzilla.suse.com/933227","tags":["report"]},{"url":"https://bugzilla.suse.com/935074","tags":["report"]},{"url":"https://bugzilla.suse.com/935224","tags":["report"]},{"url":"https://bugzilla.suse.com/935226","tags":["report"]},{"url":"https://bugzilla.suse.com/935227","tags":["report"]},{"url":"https://bugzilla.suse.com/935232","tags":["report"]},{"url":"https://bugzilla.suse.com/935234","tags":["report"]},{"url":"https://bugzilla.suse.com/935274","tags":["report"]},{"url":"https://bugzilla.suse.com/935275","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0237","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3479","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4721","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0232","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4644","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150436-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151018-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151265-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2013-6501","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2015/02/08/5","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-6501","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2013-6501","description":"The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.","status":"published","published":"2015-03-30T10:00:00Z","modified":"2024-08-06T17:46:22.262Z","updated_at":"2026-11-02T14:34:57.499208Z"}],"euvd":[{"id":"EUVD-2013-6304","description":"The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.","status":"published","published":"2015-03-30T10:00:00Z","modified":"2024-08-06T17:46:22Z","updated_at":"2026-11-03T01:56:25.766525Z"}],"ghsa":[{"id":"GHSA-x247-pp49-3c7r","title":"The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in...","description":"The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.","status":"published","published":"2022-05-17T03:38:27Z","modified":"2023-01-27T05:07:27Z","cwes":["CWE-74"],"updated_at":"2026-11-02T14:43:07.326529Z"}],"nvd":[{"id":"CVE-2013-6501","description":"The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.","status":"published","published":"2015-03-30T10:59:00.067Z","modified":"2026-06-17T00:00:36.127Z","cvss":[{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T14:02:51.408338Z"}],"osv":[{"id":"SUSE-SU-2015:0370-1","title":"Security update for php53","description":"\nThis update fixes the following vulnerabilities in php:\n\n    * Heap corruption issue in exif_thumbnail(). (CVE-2014-3670)\n    * Integer overflow in unserialize(). (CVE-2014-3669)\n    * Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime().\n      (CVE-2014-3668)\n\nSecurity Issues:\n\n    * CVE-2014-3669\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3669\u003e\n    * CVE-2014-3670\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3670\u003e\n    * CVE-2014-3668\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3668\u003e\n\n","status":"published","published":"2014-10-28T10:05:33Z","modified":"2025-05-02T04:03:57.991036Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0436-1","title":"Security update for php53","description":"\nThis update fixes the following vulnerabilities in php:\n\n    * Heap corruption issue in exif_thumbnail(). (CVE-2014-3670)\n    * Integer overflow in unserialize(). (CVE-2014-3669)\n    * Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime().\n      (CVE-2014-3668)\n\nSecurity Issues:\n\n    * CVE-2014-3669\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3669\u003e\n    * CVE-2014-3670\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3670\u003e\n    * CVE-2014-3668\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3668\u003e\n\n","status":"published","published":"2014-10-28T10:05:33Z","modified":"2026-02-04T02:53:21.704709Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1018-1","title":"Security update for php53","description":"\nThis update fixes the following vulnerabilities in php:\n\n    * Heap corruption issue in exif_thumbnail(). (CVE-2014-3670)\n    * Integer overflow in unserialize(). (CVE-2014-3669)\n    * Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime().\n      (CVE-2014-3668)\n\nSecurity Issues:\n\n    * CVE-2014-3669\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3669\u003e\n    * CVE-2014-3670\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3670\u003e\n    * CVE-2014-3668\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3668\u003e\n\n","status":"published","published":"2014-10-28T10:05:33Z","modified":"2026-02-04T03:41:58.76149Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1265-1","title":"Security update for php53","description":"\nThis update fixes the following vulnerabilities in php:\n\n    * Heap corruption issue in exif_thumbnail(). (CVE-2014-3670)\n    * Integer overflow in unserialize(). (CVE-2014-3669)\n    * Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime().\n      (CVE-2014-3668)\n\nSecurity Issues:\n\n    * CVE-2014-3669\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3669\u003e\n    * CVE-2014-3670\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3670\u003e\n    * CVE-2014-3668\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3668\u003e\n\n","status":"published","published":"2014-10-28T10:05:33Z","modified":"2026-02-04T02:45:44.22952Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2013-6501","description":"The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.","status":"published","published":"2015-03-30T10:59:00Z","modified":"2026-10-21T23:00:10.266747073Z","updated_at":"2026-11-02T15:54:07.421078Z"}]}}