Vulnerability in PHP
CVE-2004-1064
The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attackers to bypass safe mode. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.037 (89.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 90th percentile — 89.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.037 · newest: 0.037 · change: 0.000
Affected products
- PHP
- Canonical Ubuntu Linux — versions 4.10
References
- www.mandriva.com/security/advisories (vendor-advisory, Third Party Advisory)
- www.securityfocus.com/bid/11964 (VDB Entry, Third Party Advisory, vdb-entry)
- www.php.net/release_4_3_10.php (Release Notes, Vendor Advisory)
- www.mandriva.com/security/advisories (vendor-advisory, Third Party Advisory)
- www.hardened-php.net/advisories/012004.txt (Third Party Advisory)
- exchange.xforce.ibmcloud.com/vulnerabilities/18512 (VDB Entry, Third Party Advisory, vdb-entry)
- distro.conectiva.com.br/atualizacoes/ (vendor-advisory, Broken Link)
- www.gentoo.org/security/en/glsa/glsa-200412-14.xml (vendor-advisory, Third Party Advisory)
- www.securityfocus.com/archive/1/384545 (mailing-list, VDB Entry, Third Party Advisory)
- www.ubuntu.com/usn/usn-99-2/ (vendor-advisory, Third Party Advisory)