CVE-2002-0985

Severity

75%

Complexity

99%

Confidentiality

106%

Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g. sendmail) in the 5th argument to mail(), altering MTA behavior and possibly executing commands.

CVSS 2.0 Base Score 7.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:P).

Overview

Type

PHP

First reported 22 years ago

2002-09-24 04:00:00

Last updated 7 years ago

2017-10-10 01:30:00

Affected Software

PHP PHP 3.0.18

3.0.18

PHP 4.0.0

4.0

PHP PHP 4.0.1

4.0.1

PHP PHP 4.0.2

4.0.2

PHP PHP 4.0.3

4.0.3

PHP PHP 4.0.4

4.0.4

PHP PHP 4.0.5

4.0.5

PHP PHP 4.0.6

4.0.6

PHP PHP 4.0.7

4.0.7

PHP PHP 4.1.0

4.1.0

PHP PHP 4.1.1

4.1.1

PHP PHP 4.1.2

4.1.2

PHP PHP 4.2.0

4.2.0

PHP PHP 4.2.1

4.2.1

PHP PHP 4.2.2

4.2.2

References

CSSA-2003-008.0

CLA-2002:545

20020823 PHP: Bypass safe_mode and inject ASCII control chars with mail()

20030707 [OpenPKG-SA-2003.032] OpenPKG Security Advisory (php)

DSA-168

Patch, Vendor Advisory

MDKSA-2003:082

SuSE-SA:2002:036

2111

RHSA-2002:213