CVE-2016-5385

Published: Jul 19, 2016Modified: May 6, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue.

Affected (20)

Products: Oracle: Communications User Data Repository, Enterprise Manager Ops Center, Linux · Fedoraproject: Fedora · Hp: Storeever Msl6480 Tape Library Firmware, System Management Homepage · +5 more

Show all products

Oracle

3 products

Communications User Data Repository

Enterprise Manager Ops Center

Linux

Fedoraproject

1 product

Fedora

2 products

Storeever Msl6480 Tape Library Firmware

System Management Homepage

Php

1 product

Php

Redhat

3 products

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Workstation

1 product

1 product

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Oracle Communications User Data Repository	Version 10.0.0
Oracle Communications User Data Repository	Version 10.0.1
Oracle Communications User Data Repository	Version 12.0.0
Oracle Enterprise Manager Ops Center	Version 12.2.2
Oracle Enterprise Manager Ops Center	Version 12.3.2
Oracle Linux	Version 6
Oracle Linux	Version 7

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 23
Fedoraproject Fedora	Version 24

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hp Storeever Msl6480 Tape Library Firmware	Up to 5.09

Running on/with	Platform Versions
Hp Storeever Msl6480 Tape Library	All versions

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Hp System Management Homepage	Up to 7.5.5.0

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Php Php	From 5.5.0 to 5.5.38
Php Php	From 5.6.0 to 5.6.24
Php Php	From 7.0.0 to 7.0.8

Configuration F

3 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 6.0
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Workstation	Version 6.0

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Drupal Drupal	From 8.0.0 to 8.1.7

Related CWEs

CWE-601

URL Redirection to Untrusted Site ('Open Redirect')

A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

References (50)

http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html

Source: secalert@redhat.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1609.html

Source: secalert@redhat.com

Broken LinkThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1610.html

Source: secalert@redhat.com

Broken LinkThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1611.html

Source: secalert@redhat.com

Broken LinkThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1612.html

Source: secalert@redhat.com

Broken LinkThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-1613.html

Source: secalert@redhat.com

Broken LinkThird Party Advisory

http://www.debian.org/security/2016/dsa-3631

Source: secalert@redhat.com

Third Party Advisory

http://www.kb.cert.org/vuls/id/797896

Source: secalert@redhat.com

Third Party AdvisoryUS Government Resource

http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

Source: secalert@redhat.com

PatchThird Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

Source: secalert@redhat.com

PatchThird Party Advisory

http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/bid/91821

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1036335

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1353794

Source: secalert@redhat.com

Issue TrackingThird Party AdvisoryVDB Entry

https://github.com/guzzle/guzzle/releases/tag/6.2.1

Source: secalert@redhat.com

Release NotesThird Party Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03770en_us

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05320149

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05333297

Source: secalert@redhat.com

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722

Source: secalert@redhat.com

Third Party Advisory

https://httpoxy.org/

Source: secalert@redhat.com

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7RMYXAVNYL2MOBJTFATE73TOVOEZYC5R/

Source: secalert@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GXFEIMZPSVGZQQAYIQ7U7DFVX3IBSDLF/

Source: secalert@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KZOIUYZDBWNDDHC6XTOLZYRMRXZWTJCP/

Source: secalert@redhat.com

https://security.gentoo.org/glsa/201611-22

Source: secalert@redhat.com

Third Party Advisory

https://www.drupal.org/SA-CORE-2016-003

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html