NVD

Id
71456  
Name
CVE-2004-1064  
Description
The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attackers to bypass safe mode. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-01-10  
Modified Date
2017-07-10  
Seq
2004-1064  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
369541 71456 CVE-2004-1064 CLA-2005:915  View
369542 71456 CVE-2004-1064 GLSA-200412-14  View
369543 71456 CVE-2004-1064 http://www.hardened-php.net/advisories/012004.txt  View
369544 71456 CVE-2004-1064 MDKSA-2004:151  View
369545 71456 CVE-2004-1064 MDKSA-2005:072  View
369546 71456 CVE-2004-1064 http://www.php.net/release_4_3_10.php  View
369547 71456 CVE-2004-1064 HPSBMA01212  View
369548 71456 CVE-2004-1064 20041215 Advisory 01/2004: Multiple vulnerabilities in PHP 4/5  View
369549 71456 CVE-2004-1064 11964  View
369550 71456 CVE-2004-1064 php-realpath-safemode-bypass(18512)  View
369551 71456 CVE-2004-1064 USN-99-1  View
369552 71456 CVE-2004-1064 USN-99-2  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63200 JVNDB-2004-000542 PHP の realpath() 関数におけるファイルパス長の制限を回避される脆弱性 ------------ CVE-2004-1064 9491 CVE-2004-1064 71456 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000542.html 2004-12-15 2007-04-01 View