Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2004-1063

Published: 10/01/2005 Updated: 08/12/2020
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Php

Vulnerability Summary

PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safe_mode_exec_dir restrictions and execute commands outside of the intended safe_mode_exec_dir via shell metacharacters in the current directory name. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

php php

canonical ubuntu linux 4.10

Vendor Advisories

Ubuntu Security Notice: php4 vulnerabilities
Stefano Di Paola discovered integer overflows in PHP’s pack() and unpack() functions A malicious PHP script could exploit these to break out of safe mode and execute arbitrary code with the privileges of the PHP interpreter (CAN-2004-1018) ...

References

NVD-CWE-noinfohttp://www.securityfocus.com/archive/1/384545http://www.hardened-php.net/advisories/012004.txthttp://www.php.net/release_4_3_10.phphttp://www.gentoo.org/security/en/glsa/glsa-200412-14.xmlhttp://www.securityfocus.com/bid/11964http://www.securityfocus.com/advisories/9028http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000915http://www.mandriva.com/security/advisories?name=MDKSA-2004:151http://www.mandriva.com/security/advisories?name=MDKSA-2005:072http://www.osvdb.org/12412https://www.ubuntu.com/usn/usn-99-1/https://exchange.xforce.ibmcloud.com/vulnerabilities/18511https://usn.ubuntu.com/99-1/https://nvd.nist.gov
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
cross-site request forgeryCVE-2024-34351CVE-2024-1076CVE-2024-25522CVE-2024-34547CVE-2024-4644unauthorizedremoteCVE-2024-4671
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook