PT-2004-2047 · Php · Php

Stefan Esser · Published 2004-12-08 · Updated 2020-12-08 · CVE-2004-1064

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: PHP versions 4.x through 4.3.9 PHP versions 5.x through 5.0.2 PHP versions prior to 4.3.10 PHP versions prior to 5.0.3

Description: The issue allows attackers to bypass safe mode in PHP due to the truncation of the file path before passing the data to the realpath function. Several vulnerabilities were discovered within PHP, including buffer overflow, information leak, path truncation, and safe mode restriction bypass vulnerabilities. These vulnerabilities affect various functions such as pack(), unpack(), and unserialize().

Recommendations: For PHP versions 4.x through 4.3.9, update to version 4.3.10 or later. For PHP versions 5.x through 5.0.2, update to version 5.0.3 or later. As a temporary workaround, consider restricting access to the realpath() function and the safe mode exec dir until a patch is available. Avoid using the pack() and unpack() functions with untrusted input until the issue is resolved. Restrict the use of the unserialize() function with untrusted data to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2004-1064

Affected Products

Php

References · 17

• https://ubuntu.com/usn/usn-99-1 · Vendor Advisory
• https://ubuntu.com/usn/usn-99-2 · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000915 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1064 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1064 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1018 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2004:151 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:072 · Vendor Advisory
• http://securityfocus.com/advisories/9028 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-1063 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200412-14.xml · Vendor Advisory
• http://php.net/release_4_3_10.php · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18512 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1064 · Note
• http://securityfocus.com/bid/11964 · Note