Candidate: CVE-2015-5723
PublicDate: 2016-06-07 14:06:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5723
 http://www.doctrine-project.org/2015/08/31/security_misconfiguration_vulnerability_in_various_doctrine_projects.html
Description:
 Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before
 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or
 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before
 3.0.1 use world-writable permissions for cache directories, which allows
 local users to execute arbitrary PHP code with additional privileges by
 leveraging an application with the umask set to 0 and that executes cache
 entries as code.
Ubuntu-Description:
Notes:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H [7.8 HIGH]

Patches_php-doctrine-cache:
upstream_php-doctrine-cache: released (1.4.2-1)
precise_php-doctrine-cache: DNE
precise/esm_php-doctrine-cache: DNE
trusty_php-doctrine-cache: DNE
trusty/esm_php-doctrine-cache: DNE
vivid_php-doctrine-cache: ignored (reached end-of-life)
vivid/stable-phone-overlay_php-doctrine-cache: DNE
vivid/ubuntu-core_php-doctrine-cache: DNE
wily_php-doctrine-cache: ignored (reached end-of-life)
xenial_php-doctrine-cache: not-affected (1.6.0-1ubuntu2)
yakkety_php-doctrine-cache: ignored (reached end-of-life)
zesty_php-doctrine-cache: ignored (reached end-of-life)
artful_php-doctrine-cache: ignored (reached end-of-life)
bionic_php-doctrine-cache: not-affected (1.6.0-1ubuntu2)
cosmic_php-doctrine-cache: not-affected (1.6.0-1ubuntu2)
disco_php-doctrine-cache: not-affected (1.6.0-1ubuntu2)
devel_php-doctrine-cache: not-affected (1.6.0-1ubuntu2)

Patches_php-doctrine-annotations:
upstream_php-doctrine-annotations: released (1.2.7-1)
precise_php-doctrine-annotations: DNE
precise/esm_php-doctrine-annotations: DNE
trusty_php-doctrine-annotations: DNE
trusty/esm_php-doctrine-annotations: DNE
vivid_php-doctrine-annotations: ignored (reached end-of-life)
vivid/stable-phone-overlay_php-doctrine-annotations: DNE
vivid/ubuntu-core_php-doctrine-annotations: DNE
wily_php-doctrine-annotations: ignored (reached end-of-life)
xenial_php-doctrine-annotations: not-affected (1.2.7-1build1)
yakkety_php-doctrine-annotations: ignored (reached end-of-life)
zesty_php-doctrine-annotations: ignored (reached end-of-life)
artful_php-doctrine-annotations: ignored (reached end-of-life)
bionic_php-doctrine-annotations: not-affected (1.5.0really1.2.7-1)
cosmic_php-doctrine-annotations: not-affected (1.5.0really1.2.7-1)
disco_php-doctrine-annotations: not-affected (1.5.0really1.2.7-1)
devel_php-doctrine-annotations: not-affected (1.5.0really1.2.7-1)

Patches_php-doctrine-common:
upstream_php-doctrine-common: released (2.4.3-1)
precise_php-doctrine-common: DNE
precise/esm_php-doctrine-common: DNE
trusty_php-doctrine-common: ignored (reached end-of-life)
trusty/esm_php-doctrine-common: DNE (trusty was needed)
vivid_php-doctrine-common: ignored (reached end-of-life)
vivid/stable-phone-overlay_php-doctrine-common: DNE
vivid/ubuntu-core_php-doctrine-common: DNE
wily_php-doctrine-common: ignored (reached end-of-life)
xenial_php-doctrine-common: not-affected (2.4.3-1ubuntu1)
yakkety_php-doctrine-common: ignored (reached end-of-life)
zesty_php-doctrine-common: ignored (reached end-of-life)
artful_php-doctrine-common: ignored (reached end-of-life)
bionic_php-doctrine-common: not-affected (2.4.3-1ubuntu1)
cosmic_php-doctrine-common: not-affected (2.4.3-1ubuntu1)
disco_php-doctrine-common: not-affected (2.4.3-1ubuntu1)
devel_php-doctrine-common: not-affected (2.4.3-1ubuntu1)

Patches_doctrine:
upstream_doctrine: released (2.4.8-1)
precise_doctrine: ignored (reached end-of-life)
precise/esm_doctrine: DNE (precise was needed)
trusty_doctrine: ignored (reached end-of-life)
trusty/esm_doctrine: DNE (trusty was needed)
vivid_doctrine: ignored (reached end-of-life)
vivid/stable-phone-overlay_doctrine: DNE
vivid/ubuntu-core_doctrine: DNE
wily_doctrine: ignored (reached end-of-life)
xenial_doctrine: not-affected (2.4.8-2)
yakkety_doctrine: ignored (reached end-of-life)
zesty_doctrine: ignored (reached end-of-life)
artful_doctrine: ignored (reached end-of-life)
bionic_doctrine: not-affected (2.4.8-2)
cosmic_doctrine: not-affected (2.4.8-2)
disco_doctrine: not-affected (2.4.8-2)
devel_doctrine: not-affected (2.4.8-2)