NVD

Id
78681  
Name
CVE-2001-1246  
Description
PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote attackers to execute arbitrary commands via shell metacharacters.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2001-06-30  
Modified Date
2008-09-10  
Seq
2001-1246  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
393102 78681 CVE-2001-1246 20010630 php breaks safe mode  View
393103 78681 CVE-2001-1246 php-safemode-elevate-privileges(6787)  View
393104 78681 CVE-2001-1246 http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gz  View
393105 78681 CVE-2001-1246 RHSA-2002:102  View
393106 78681 CVE-2001-1246 RHSA-2002:129  View
393107 78681 CVE-2001-1246 RHSA-2003:159  View
393108 78681 CVE-2001-1246 2954  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63943 JVNDB-2002-000270 PHP の mail() 関数 における任意のコマンドを実行される脆弱性 ------------ CVE-2001-1246 4050 CVE-2001-1246 78681 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000270.html 2002-11-04 2007-04-01 View