CVE

Id
4050  
CVE No.
CVE-2001-1246  
Status
Entry  
Description
PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote attackers to execute arbitrary commands via shell metacharacters.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
18797 4050 CVE-2001-1246 BUGTRAQ:20010630 php breaks safe mode  View
18798 4050 CVE-2001-1246 URL:http://online.securityfocus.com/archive/1/194425  View
18799 4050 CVE-2001-1246 CONFIRM:http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gz  View
18800 4050 CVE-2001-1246 REDHAT:RHSA-2002:102  View
18801 4050 CVE-2001-1246 URL:http://www.redhat.com/support/errata/RHSA-2002-102.html  View
18802 4050 CVE-2001-1246 REDHAT:RHSA-2002:129  View
18803 4050 CVE-2001-1246 URL:http://www.redhat.com/support/errata/RHSA-2002-129.html  View
18804 4050 CVE-2001-1246 REDHAT:RHSA-2003:159  View
18805 4050 CVE-2001-1246 URL:http://www.redhat.com/support/errata/RHSA-2003-159.html  View
18806 4050 CVE-2001-1246 BID:2954  View
18807 4050 CVE-2001-1246 URL:http://www.securityfocus.com/bid/2954  View
18808 4050 CVE-2001-1246 XF:php-safemode-elevate-privileges(6787)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63943 JVNDB-2002-000270 PHP の mail() 関数 における任意のコマンドを実行される脆弱性 ------------ CVE-2001-1246 4050 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000270.html  View