10

CVE-2004-1064

The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attackers to bypass safe mode.  NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute.  This candidate may change significantly in the future as a result of further discussion.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Php ≫ Php Version >= 4.0.0 <= 4.3.9
Php ≫ Php Version >= 5.0.0 <= 5.0.2
Canonical ≫ Ubuntu Linux Version4.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.74% 0.884
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/advisories/9028
Third Party Advisory
VDB Entry
http://www.hardened-php.net/advisories/012004.txt
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:151
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:072
Third Party Advisory
http://www.php.net/release_4_3_10.php
Vendor Advisory
Release Notes
https://www.ubuntu.com/usn/usn-99-1/
Third Party Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000915
Broken Link
http://www.gentoo.org/security/en/glsa/glsa-200412-14.xml
Third Party Advisory
http://www.securityfocus.com/archive/1/384545
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/11964
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/18512
Third Party Advisory
VDB Entry
https://www.ubuntu.com/usn/usn-99-2/
Third Party Advisory