Vulnerability in Slackware Linux
CVE-2004-0530
The PHP package in Slackware 8.1, 9.0, and 9.1, when linked against a static library, includes /tmp in the search path, which allows local users to execute arbitrary code as the PHP user by inserting shared libraries into the appropriate path.
EPSS: 0.004 (33.6th percentile) — read the EPSS interpretation.
Affected products
- Slackware Slackware_linux — versions 8.1, 9.0, 9.1
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_SLACKWARE, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)