PT-2004-1651 · Php · Php

Published 2004-06-10 · Updated 2022-07-01 · CVE-2004-0542

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PHP versions prior to 4.3.7

Description The issue is due to an input validation error in the escapeshellcmd() routine, which fails to filter the characters %, |, and >, allowing a remote attacker to access environment variables, redirect output, and execute arbitrary commands. This can result in a loss of confidentiality and integrity. The escapeshellarg() function is also affected by the % character.

Recommendations For PHP versions prior to 4.3.7, update to version 4.3.7 or later to resolve the issue. As a temporary workaround, consider restricting the use of the escapeshellcmd() and escapeshellarg() functions until a patch is applied. Avoid using the characters %, |, and > in the escapeshellcmd() function and the % character in the escapeshellarg() function to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2004-0542

Affected Products

Php

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2004-0542 · Security Note
• http://php.net/release_4_3_7.php · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16331 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0542 · Note
• http://idefense.com/application/poi/display?id=108 · Note
• http://xforce.iss.net/xforce/xfdb/16331 · Note