CVE:CVE-2014-5459
CNNVD:CNNVD-201408-508
PHP PEAR（全称PHP Extension and Application Repository）是PHP Group负责维护的一个PHP扩展及应用的代码仓库。
PHP 5.6.0及之前版本的PEAR中REST.php脚本中的‘retrieveCacheFirst’和‘useLocalCache’函数中的‘PEAR_REST’类中存在安全漏洞。本地攻击者可通过在/tmp/pear/cache/ URL下的rest.cachefile或rest.cacheid文件上实施符号链接攻击利用该漏洞写入任意文件。
solution:Upgrade php php to a higher version than 5.6.0,and avoid the version (,5.6.0]; Upgrade oracle solaris to a higher version than 11.2,and avoid the version 11.2; Upgrade opensuse evergreen to a higher version than 11.4,and avoid the version 11.4; Upgrade opensuse opensuse to a higher version than 12.3,13.1,and avoid the version 12.3,13.1