CVE

Id
11118  
CVE No.
CVE-2004-2692  
Status
Candidate  
Description
The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick operator, which is not handled using the php_escape_shell_cmd function.  
Phase
Assigned (20071006)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
78294 11118 CVE-2004-2692 FULLDISC:20040708 RE: php-exec-dir vulnerable after latest upgrade  View
78295 11118 CVE-2004-2692 URL:http://seclists.org/fulldisclosure/2004/Jul/0350.html  View
78296 11118 CVE-2004-2692 FULLDISC:20040708 Re: php-exec-dir vulnerable after latest upgrade  View
78297 11118 CVE-2004-2692 URL:http://seclists.org/fulldisclosure/2004/Jul/0357.html  View
78298 11118 CVE-2004-2692 FULLDISC:20040708 php-exec-dir vulnerable after latest upgrade  View
78299 11118 CVE-2004-2692 URL:http://seclists.org/fulldisclosure/2004/Jul/0347.html  View
78300 11118 CVE-2004-2692 CONFIRM:http://kyberdigi.cz/projects/execdir/english.html  View
78301 11118 CVE-2004-2692 BID:10598  View
78302 11118 CVE-2004-2692 URL:http://www.securityfocus.com/bid/10598  View
78303 11118 CVE-2004-2692 OSVDB:7243  View
78304 11118 CVE-2004-2692 URL:http://www.osvdb.org/7243  View
78305 11118 CVE-2004-2692 SECUNIA:11928  View
78306 11118 CVE-2004-2692 URL:http://secunia.com/advisories/11928  View
78307 11118 CVE-2004-2692 XF:phpexecdir-semicolon-restriction-bypass(16498)  View

Related JVN