| Package | Affected versions | Patched versions |
|---|---|---|
| php | ≥ 5.3.0, < 5.3.28≥ 5.4.0, < 5.4.28≥ 5.5.0, < 5.5.12 | 5.3.285.4.285.5.12 |
sapi/fpm/fpm/fpm_unix.c in the FastCGI Process Manager (FPM) in PHP before 5.4.28 and 5.5.x before 5.5.12 uses 0666 permissions for the UNIX socket, which allows local users to gain privileges via a crafted FastCGI client.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free