CVE-2014-3981

acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file.

We have discovered 734,199 live websites that are affected by CVE-2014-3981.

Run a Free Instant Scan



Affected Software

Product  PHP
Category Programming Languages
Vulnerable Domains734,199 live websites (10% of PHP install base)
Vulnerable Versions
  • from 0 through 5.5.13
Vulnerable Versions Count123 versions ( 24% of all versions)



Details

  • Published - Jun 8, 2014
  • Updated - Aug 6, 2024

Website Distribution by Country

Number of websites using CVE-2014-3981
United States128,947 websites


Taiwan106,251 websites
Russia83,322 websites
Japan51,225 websites
Germany47,465 websites
France45,970 websites
China26,974 websites
Netherlands23,716 websites
Korea, South17,166 websites

Website Distribution by TLD

Number of websites using CVE-2014-3981
.com319,852 websites
.ru72,108 websites
.de35,154 websites
.net27,384 websites
.org18,739 websites
.fr16,353 websites
.nl15,501 websites
.jp14,037 websites
.info11,694 websites
.it10,286 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2014-3981

Top websites that are affected by CVE-2014-3981. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****.***********.com Canada***
************.ru Russia***
******************.com United States*,***
***.org Italy*,***
****.com United States*,***
********.com United States*,***
***.ru Russia*,***
****.**.com United States*,***
*****.***.tw Taiwan*,***
****.******************.com United States*,***
See full domain list

FAQ

A total of 734,199 websites have been identified as vulnerable to CVE-2014-3981, based on global website indexing conducted by WebTechSurvey.
The PHP is affected by the CVE-2014-3981 vulnerability.
PHP versions up to and including 5.5.13 are vulnerable to CVE-2014-3981.