CVE

Id
9820  
CVE No.
CVE-2004-1392  
Status
Candidate  
Description
PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to the curl_init function.  
Phase
Assigned (20050205)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
66961 9820 CVE-2004-1392 BUGTRAQ:20041027 PHP4 cURL functions bypass open_basedir  View
66962 9820 CVE-2004-1392 URL:http://marc.info/?l=bugtraq&m=109898213806099&w=2  View
66963 9820 CVE-2004-1392 FEDORA:FLSA:2344  View
66964 9820 CVE-2004-1392 URL:https://bugzilla.fedora.us/show_bug.cgi?id=2344  View
66965 9820 CVE-2004-1392 REDHAT:RHSA-2005:405  View
66966 9820 CVE-2004-1392 URL:http://www.redhat.com/support/errata/RHSA-2005-405.html  View
66967 9820 CVE-2004-1392 REDHAT:RHSA-2005:406  View
66968 9820 CVE-2004-1392 URL:http://www.redhat.com/support/errata/RHSA-2005-406.html  View
66969 9820 CVE-2004-1392 BUGTRAQ:20050120 [USN-66-1] PHP vulnerabilities  View
66970 9820 CVE-2004-1392 URL:http://marc.info/?l=bugtraq&m=110625060220934&w=2  View
66971 9820 CVE-2004-1392 BID:11557  View
66972 9820 CVE-2004-1392 URL:http://www.securityfocus.com/bid/11557  View
66973 9820 CVE-2004-1392 OVAL:oval:org.mitre.oval:def:9279  View
66974 9820 CVE-2004-1392 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9279  View
66975 9820 CVE-2004-1392 SECTRACK:1011984  View
66976 9820 CVE-2004-1392 URL:http://securitytracker.com/id?1011984  View
66977 9820 CVE-2004-1392 XF:php-openbasedir-restriction-bypass(17900)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62687 JVNDB-2004-000028 Sun Solaris の tcsetattr 関数におけるサービス運用妨害 (DoS) の脆弱性 Sun Solaris には tcsetattr 関数の処理に不備が存在し、tcsetattr 関数を用いてシリアルポートの設定をリセットした際に、システムがハングアップする脆弱性が存在します。 CVE-2004-1393 9820 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000028.html  View