PT-2002-1300 · Php+1 · Php+1

Published 2002-05-03 · Updated 2016-10-18 · CVE-2002-0229

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions 3.0 through 4.1.0

Description The issue allows attackers with access to the MySQL database to bypass access restrictions and read arbitrary files using SQL statements, specifically "LOAD DATA INFILE LOCAL".

Recommendations For PHP versions 3.0 through 4.1.0, consider restricting access to the MySQL database to minimize the risk of exploitation. As a temporary workaround, restrict the use of "LOAD DATA INFILE LOCAL" SQL statements until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2002-0229

Affected Products

Mysql Server

Php

References · 12

• 🔥 https://exploit-db.com/exploits/21264 · Exploit
• 🔥 https://exploit-db.com/exploits/21266 · Exploit
• 🔥 https://exploit-db.com/exploits/21265 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-0229 · Security Note
• http://iss.net/security_center/static/8105.php · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0229 · Note
• http://marc.info/?l=bugtraq&m=101304702002321&w=2 · Note
• http://marc.info/?l=ntbugtraq&m=101303065423534&w=2 · Note
• http://securityfocus.com/bid/4026 · Note
• http://marc.info/?l=ntbugtraq&m=101285016125377&w=2 · Note
• http://marc.info/?l=ntbugtraq&m=101303819613337&w=2 · Note
• http://marc.info/?l=bugtraq&m=101286577109716&w=2 · Note