CVE catalog

CVE-2013-6501

UBUNTU-CVE-2013-6501

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.58% · Oct 25, 2026

The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp with a predictable filename that is used by the get_sdl function in ext/soap/php_sdl.c.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuphp5pro5.5.3+dfsg-1ubuntu2vulnerable
Ubuntuphp5pro5.5.3+dfsg-1ubuntu3vulnerable
Ubuntuphp5pro5.5.6+dfsg-1ubuntu1vulnerable
Ubuntuphp5pro5.5.6+dfsg-1ubuntu2vulnerable
Ubuntuphp5pro5.5.8+dfsg-2ubuntu1vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu1vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu2vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu3vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.1vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.2vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.3vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.4vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.5vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.6vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.7vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.9vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.11vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.12vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.13vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.14vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.16vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.17vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.19vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.20vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.21vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.22vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.23vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.24vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.25vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.26vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.27vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm1vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm2vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm3vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm4vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm5vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm6vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm8vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm10vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm11vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm12vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm13vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm14vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm15vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm16vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm17vulnerable
Ubuntuphp5pro5.5.9+dfsg-1ubuntu4.29+esm18vulnerable
Ubuntuphp7.0pro7.0.1-5vulnerable
Ubuntuphp7.0pro7.0.1-6vulnerable
Ubuntuphp7.0pro7.0.2-1vulnerable
Ubuntuphp7.0pro7.0.2-3vulnerable
Ubuntuphp7.0pro7.0.2-4vulnerable
Ubuntuphp7.0pro7.0.2-5vulnerable
Ubuntuphp7.0pro7.0.3-2vulnerable
Ubuntuphp7.0pro7.0.3-3vulnerable
Ubuntuphp7.0pro7.0.3-9ubuntu1vulnerable
Ubuntuphp7.0pro7.0.4-5ubuntu1vulnerable
Ubuntuphp7.0pro7.0.4-5ubuntu2vulnerable
Ubuntuphp7.0pro7.0.4-7ubuntu1vulnerable
Ubuntuphp7.0pro7.0.4-7ubuntu2vulnerable
Ubuntuphp7.0pro7.0.4-7ubuntu2.1vulnerable
Ubuntuphp7.0pro7.0.8-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.8-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.0pro7.0.8-0ubuntu0.16.04.3vulnerable
Ubuntuphp7.0pro7.0.13-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.15-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.15-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.0pro7.0.15-0ubuntu0.16.04.4vulnerable
Ubuntuphp7.0pro7.0.18-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.22-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.25-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.28-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.30-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.32-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.1vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.2vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.3vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.4vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.5vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.6vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.7vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.9vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.11vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.12vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.14vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.15vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm1vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm2vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm3vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm4vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm5vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm6vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm7vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm8vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm9vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm10vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm11vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm12vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm13vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm14vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm15vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm16vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm17vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm18vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm19vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm20vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm21vulnerable
Ubuntuphp7.0pro7.0.33-0ubuntu0.16.04.16+esm22vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References