CVE

Id
8918  
CVE No.
CVE-2004-0490  
Status
Candidate  
Description
cPanel, when compiling Apache 1.3.29 and PHP with the mod_phpsuexec option, does not set the --enable-discard-path option, which causes php to use the SCRIPT_FILENAME variable to find and execute a script instead of the PATH_TRANSLATED variable, which allows local users to execute arbitrary PHP code as other users via a URL that references the attacker"s script after the user"s script, which executes the attacker"s script with the user"s privileges, a different vulnerability than CVE-2004-0529.  
Phase
Assigned (20040527)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
57028 8918 CVE-2004-0490 BUGTRAQ:20040524 cPanel mod_phpsuexec Vulnerability  View
57029 8918 CVE-2004-0490 URL:http://www.securityfocus.com/archive/1/364112  View
57030 8918 CVE-2004-0490 MISC:http://www.a-squad.com/audit/explain10.html  View
57031 8918 CVE-2004-0490 MISC:http://www.securiteam.com/tools/5TP0N15CUA.html  View
57032 8918 CVE-2004-0490 MISC:http://bugzilla.cpanel.net/show_bug.cgi?id=283  View
57033 8918 CVE-2004-0490 CONFIRM:http://bugzilla.cpanel.net/show_bug.cgi?id=664  View
57034 8918 CVE-2004-0490 XF:cpanel-modphpsuexec-execute-commands(16239)  View
57035 8918 CVE-2004-0490 URL:http://xforce.iss.net/xforce/xfdb/16239  View
57036 8918 CVE-2004-0490 BID:10407  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62895 JVNDB-2004-000237 Linux Kernel の linux-2.4.21-mlock.patch におけるセキュリティ制限を回避される脆弱性 Linux Kernel の linux-2.4.21-mlock.patch には、プロセス間通信を行っている 2 つのプロセスで、一方のプロセスが SysV IPC 共有メモリページをロックし、他方がロックを解除した場合のページカウントの処理の不備のため、 RLIMIT_MEMLOCK による制限が適切に適用されない脆弱性が存在します。 CVE-2004-0491 8918 2.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000237.html  View