High severity · published Jul 19, 2016
CVE-2016-5385
PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in…
8.1
CVSS
50.4%
EPSS
No
On KEV
Description
PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)50.4% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DR
Drupal · Drupal
8.0.0 before 8.1.7 · source: NVD
PH
PHP · PHP
5.5.0 before 5.5.38; 5.6.0 before 5.6.24; 7.0.0 through 7.0.8 · source: NVD
CU
Communications User Data Repository · Oracle
10.0.0; 10.0.1; 12.0.0 · source: NVD
DL
Debian Linux · Debian
8.0 · source: NVD
EL
Enterprise Linux Desktop · Redhat
6.0 · source: NVD
EL
Enterprise Linux Server · Redhat
6.0 · source: NVD
EL
Enterprise Linux Workstation · Redhat
6.0 · source: NVD
EM
Enterprise Manager Ops Center · Oracle
12.2.2; 12.3.2 · source: NVD
FE
Fedora · Fedoraproject
23; 24 · source: NVD
LE
Leap · Opensuse
42.1 · source: NVD
LI
Linux · Oracle
6; 7 · source: NVD
SM
Storeever Msl6480 Tape Library Firmware · HP
through 5.09 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-5385
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-5385
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2016-08/msg00003.html
Broken Link
http://rhn.redhat.com/errata/RHSA-2016-1609.html
Broken Link
http://rhn.redhat.com/errata/RHSA-2016-1610.html
Broken Link
http://rhn.redhat.com/errata/RHSA-2016-1611.html
Broken Link
http://rhn.redhat.com/errata/RHSA-2016-1612.html
Broken Link
http://rhn.redhat.com/errata/RHSA-2016-1613.html
More from Drupal
9.8
CVE-2026-9082
Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
9.8
CVE-2018-7602
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
9.8
CVE-2018-7600
Drupal Core Remote Code Execution Vulnerability
8.8
CVE-2020-13671
Drupal core Un-restricted Upload of File
8.1
CVE-2019-6340
Drupal core - Highly critical - Remote Code Execution