Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2004-1063

Опубликовано: 10 янв. 2005
Источник: nvd
CVSS2: 10
EPSS Низкий

Описание

PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safe_mode_exec_dir restrictions and execute commands outside of the intended safe_mode_exec_dir via shell metacharacters in the current directory name. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Версия от 4.0.0 (включая) до 4.3.9 (включая)
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Версия от 5.0.0 (включая) до 5.0.2 (включая)
Конфигурация 2
cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*

EPSS

Процентиль: 81%
0.01672
Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

ubuntu
больше 20 лет назад

PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safe_mode_exec_dir restrictions and execute commands outside of the intended safe_mode_exec_dir via shell metacharacters in the current directory name. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.

debian
больше 20 лет назад

PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a ...

github
около 3 лет назад

PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safe_mode_exec_dir restrictions and execute commands outside of the intended safe_mode_exec_dir via shell metacharacters in the current directory name. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.

EPSS

Процентиль: 81%
0.01672
Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-noinfo