NVD

Id
79981  
Name
CVE-2002-0985  
Description
Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g. sendmail) in the 5th argument to mail(), altering MTA behavior and possibly executing commands.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-09-24  
Modified Date
2016-10-17  
Seq
2002-0985  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
398795 79981 CVE-2002-0985 CSSA-2003-008.0  View
398796 79981 CVE-2002-0985 CLA-2002:545  View
398797 79981 CVE-2002-0985 20020823 PHP: Bypass safe_mode and inject ASCII control chars with mail()  View
398798 79981 CVE-2002-0985 20030707 [OpenPKG-SA-2003.032] OpenPKG Security Advisory (php)  View
398799 79981 CVE-2002-0985 DSA-168  View
398800 79981 CVE-2002-0985 MDKSA-2003:082  View
398801 79981 CVE-2002-0985 SuSE-SA:2002:036  View
398802 79981 CVE-2002-0985 RHSA-2002:213  View
398803 79981 CVE-2002-0985 RHSA-2002:214  View
398804 79981 CVE-2002-0985 RHSA-2002:243  View
398805 79981 CVE-2002-0985 RHSA-2002:244  View
398806 79981 CVE-2002-0985 RHSA-2002:248  View
398807 79981 CVE-2002-0985 RHSA-2003:159  View
398808 79981 CVE-2002-0985 php-mail-safemode-bypass(9966)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63944 JVNDB-2002-000271 PHP の mail() 関数 における safe_mode オプションによる制限を回避される脆弱性 ------------ CVE-2002-0985 5373 CVE-2002-0985 79981 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000271.html 2002-11-04 2007-04-01 View