PT-2001-2379 · Php · Php

Publicado 2001-12-06 · Atualizado 2012-06-25 · CVE-2001-1247

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP versions 4.0.4pl1 through 4.0.5

Description The issue allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the error log function to access the files.

Recommendations For PHP versions 4.0.4pl1 through 4.0.5, consider disabling the error log function in safe mode to prevent exploitation until a patch is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2001-1247

Produtos afetados

Php

Referências · 6

• 🔥 http://online.securityfocus.com/archive/1/194425 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1247 · Nota
• http://osvdb.org/5440 · Nota
• http://redhat.com/support/errata/RHSA-2002-035.html · Aviso do Fabricante
• http://php.net/do_download.php?download_file=php-4.1.2.tar.gz · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1247 · Nota de Segurança