PT-2001-2498 · Php · Php

Published 2001-01-12 · Updated 2016-10-18 · CVE-2001-1385

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHP versions 3.0.10 through 3.0.18 PHP versions 4.0.0 through 4.0.4 PHP versions 4.0.1 pl1 through 4.0.1 pl2 PHP versions 4.0.3 pl1 through 4.0.7 RC3 PHP versions 4.1.0 through 4.1.1

Description The issue affects PHP, a server-side scripting language for creating dynamic Web sites. A vulnerability in the handling of file uploads can cause buffer overflows, allowing a remote attacker to execute arbitrary code on the Web server with elevated privileges by using the HTTP POST method to upload a PHP form containing specially-crafted MIME-encoded data. Another vulnerability can allow a remote attacker to gain unauthorized access to restricted files caused by a vulnerability in the .htaccess file. A remote attacker can create a specially-crafted HTTP request that would cause PHP to display the next Web page using the wrong values for the directives. Additionally, if the parameter engine=off is configured on just one of the virtual hosts to disable PHP execution, it may disable PHP execution on other virtual hosts on the same server, allowing a remote attacker to view the source code for the PHP page, which may contain sensitive information.

Recommendations For PHP versions 3.0.10 through 3.0.18, update to a version prior to the affected range or apply configuration changes to restrict access to sensitive files. For PHP versions 4.0.0 through 4.0.4, consider disabling the engine parameter in the .htaccess file to prevent unauthorized access to restricted files. For PHP versions 4.0.1 pl1 through 4.0.1 pl2, restrict access to the upload module to minimize the risk of buffer overflow exploitation. For PHP versions 4.0.3 pl1 through 4.0.7 RC3, avoid using the HTTP POST method to upload files until the issue is resolved. For PHP versions 4.1.0 through 4.1.1, update to a version prior to the affected range or apply configuration changes to restrict access to sensitive files.

Fix

Related Identifiers

CVE-2001-1385

Affected Products

Php

References · 14

• http://debian.org/security/2001/dsa-020 · Vendor Advisory
• http://linux-mandrake.com/en/security/2001/MDKSA-2001-013.php3 · Vendor Advisory
• http://iss.net/security_center/static/5939.php · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000373 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1385 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1385 · Note
• http://xforce.iss.net/xforce/xfdb/8281 · Note
• http://xforce.iss.net/xforce/xfdb/5940 · Note
• http://securityfocus.com/bid/2205 · Note
• http://redhat.com/support/errata/RHSA-2000-136.html · Patch, Vendor Advisory
• http://securityfocus.com/bid/4183 · Note
• http://xforce.iss.net/xforce/xfdb/5939 · Note
• http://securityfocus.com/bid/2206 · Note
• http://marc.info/?l=bugtraq&m=97957961212852 · Note