PT-2002-1300 · Php+1 · Php+1

Publicado 2002-05-03 · Atualizado 2016-10-18 · CVE-2002-0229

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions 3.0 through 4.1.0

Description The issue allows attackers with access to the MySQL database to bypass access restrictions and read arbitrary files using SQL statements, specifically "LOAD DATA INFILE LOCAL".

Recommendations For PHP versions 3.0 through 4.1.0, consider restricting access to the MySQL database to minimize the risk of exploitation. As a temporary workaround, restrict the use of "LOAD DATA INFILE LOCAL" SQL statements until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2002-0229

Produtos afetados

Mysql Server

Php

Referências · 12

• 🔥 https://exploit-db.com/exploits/21264 · Exploit
• 🔥 https://exploit-db.com/exploits/21266 · Exploit
• 🔥 https://exploit-db.com/exploits/21265 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0229 · Nota
• http://marc.info/?l=bugtraq&m=101304702002321&w=2 · Nota
• http://marc.info/?l=ntbugtraq&m=101303065423534&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0229 · Nota de Segurança
• http://securityfocus.com/bid/4026 · Nota
• http://marc.info/?l=ntbugtraq&m=101285016125377&w=2 · Nota
• http://iss.net/security_center/static/8105.php · Aviso do Fabricante
• http://marc.info/?l=ntbugtraq&m=101303819613337&w=2 · Nota
• http://marc.info/?l=bugtraq&m=101286577109716&w=2 · Nota