PT-2004-1651 · Php · Php

Publicado 2004-06-10 · Atualizado 2022-07-01 · CVE-2004-0542

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PHP versions prior to 4.3.7

Description The issue is due to an input validation error in the escapeshellcmd() routine, which fails to filter the characters %, |, and >, allowing a remote attacker to access environment variables, redirect output, and execute arbitrary commands. This can result in a loss of confidentiality and integrity. The escapeshellarg() function is also affected by the % character.

Recommendations For PHP versions prior to 4.3.7, update to version 4.3.7 or later to resolve the issue. As a temporary workaround, consider restricting the use of the escapeshellcmd() and escapeshellarg() functions until a patch is applied. Avoid using the characters %, |, and > in the escapeshellcmd() function and the % character in the escapeshellarg() function to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2004-0542

Produtos afetados

Php

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/16331 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0542 · Nota
• http://idefense.com/application/poi/display?id=108 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0542 · Nota de Segurança
• http://php.net/release_4_3_7.php · Aviso do Fabricante
• http://xforce.iss.net/xforce/xfdb/16331 · Nota