QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2004-1063

Back to search

CVE-2004-1063

Published: Dec 8, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safe_mode_exec_dir restrictions and execute commands outside of the intended safe_mode_exec_dir via shell metacharacters in the current directory name. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.

VendorProductVersions

n/a

n/a

affected
n/a

References

12412
vdb-entry
x_refsource_OSVDB
MDKSA-2005:072
vendor-advisory
x_refsource_MANDRAKE
11964
vdb-entry
x_refsource_BID
MDKSA-2004:151
vendor-advisory
x_refsource_MANDRAKE
CLA-2005:915
vendor-advisory
x_refsource_CONECTIVA
GLSA-200412-14
vendor-advisory
x_refsource_GENTOO
HPSBMA01212
vendor-advisory
x_refsource_HP
USN-99-1
vendor-advisory
x_refsource_UBUNTU

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now