CVE-2017-5630

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-74

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://pear.php.net/bugs/bug.php?id=21171Vendor Advisory
http://www.securityfocus.com/bid/95882Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/41185/Third Party Advisory, VDB Entry
http://pear.php.net/bugs/bug.php?id=21171Vendor Advisory
http://www.securityfocus.com/bid/95882Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/41185/Third Party Advisory, VDB Entry

Timeline

Published: Feb 1, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-56316.1An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter (i.e., "usr") that is transmitte CVE-2017-56326.5An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374_979. When executing an "nmap -O" command that specifie CVE-2017-56338.0Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow remote attackers to CVE-2017-56346.6The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended "Please select book CVE-2017-56357.5In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, if an anonymous user request is replicated to another node, the o CVE-2017-56369.8In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to an CVE-2017-56377.5Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, w CVE-2017-56389.8The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-mes CVE-2017-56409.8It was noticed that a malicious process impersonating an Impala daemon in Apache Impala (incubating) 2.7.0 to 2.8.0 could cause Impala daemo CVE-2017-56419.8Previous versions of Apache Flex BlazeDS (4.7.2 and earlier) did not restrict which types were allowed for AMF(X) object deserialization by CVE-2017-56429.8During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with proper ACLs.CVE-2017-56437.4Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.