PT-2001-2378 · Php · Php

Published 2001-06-30 · Updated 2024-02-14 · CVE-2001-1246

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions 4.0.5 through 4.1.0

Description The issue is related to the mail() function in PHP, where the 5th parameter is not properly cleansed in safe mode, allowing local users and possibly remote attackers to execute arbitrary commands via shell metacharacters.

Recommendations For PHP versions 4.0.5 through 4.1.0, consider disabling the mail() function in safe mode until a patch is available, or restrict the use of the 5th parameter to prevent the execution of arbitrary commands.

Exploit

Fix

Argument Injection

Weakness Enumeration

CWE-88

Related Identifiers

CVE-2001-1246

Affected Products

Php

References · 10

• 🔥 https://exploit-db.com/exploits/20985 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1246 · Security Note
• http://redhat.com/support/errata/RHSA-2003-159.html · Vendor Advisory
• http://iss.net/security_center/static/6787.php · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2002-129.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2002-102.html · Vendor Advisory
• http://online.securityfocus.com/archive/1/194425 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1246 · Note
• http://securityfocus.com/bid/2954 · Note
• http://php.net/do_download.php?download_file=php-4.1.2.tar.gz · Note