CVE-2015-5723

Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before 3.0.1 use world-writable permissions for cache directories, which allows local users to execute arbitrary PHP code with additional privileges by leveraging an application with the umask set to 0 and that executes cache entries as code.

• zend zend-cache (<= 2.4.7) • zend zend-cache 2.5.0 • zend zend-cache 2.5.1 • zend zend-cache 2.5.2 • debian debian linux 7.0 • debian debian linux 8.0 • doctrine-project object relational mapper (<= 2.4.7) • doctrine-project object relational mapper 2.5.0 • doctrine-project doctrinemongodbbundle 3.0.0 • zend zend framework (<= 2.4.7) • doctrine-project common (<= 2.4.2) • doctrine-project common 2.5.0 • doctrine-project annotations (<= 1.2.6) • doctrine-project mongodb-odm (<= 1.0.1) • zend zend framework (<= 1.12.15) • doctrine-project cache (<= 1.3.1) • doctrine-project cache 1.4.0 • doctrine-project cache 1.4.1 • zend zf-apigility-doctrine (<= 1.0.2)