CVE-2002-0985
HIGH
7.5
CVSS 2.0
Description
Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g. sendmail) in the 5th argument to mail(), altering MTA behavior and possibly executing commands.
Affected products and versions
- PHP — From 4.0 (including) to 4.2.2 (including)
References
- distro.conectiva.com.br http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000545 Broken Link
- marc.info http://marc.info/?l=bugtraq&m=103011916928204&w=2 Third Party Advisory
- marc.info http://marc.info/?l=bugtraq&m=105760591228031&w=2 Third Party Advisory
- www.debian.org http://www.debian.org/security/2002/dsa-168 Broken Link, Patch, Vendor Advisory
- www.mandrakesoft.com http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:082 Broken Link
- www.novell.com http://www.novell.com/linux/security/advisories/2002_036_modphp4.html Broken Link
- www.osvdb.org http://www.osvdb.org/2111 Broken Link
- www.redhat.com http://www.redhat.com/support/errata/RHSA-2002-213.html Broken Link, Patch, Vendor Advisory
- www.redhat.com http://www.redhat.com/support/errata/RHSA-2002-214.html Broken Link
- www.redhat.com http://www.redhat.com/support/errata/RHSA-2002-243.html Broken Link
- www.redhat.com http://www.redhat.com/support/errata/RHSA-2002-244.html Broken Link
- www.redhat.com http://www.redhat.com/support/errata/RHSA-2002-248.html Broken Link
- www.redhat.com http://www.redhat.com/support/errata/RHSA-2003-159.html Broken Link
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/9966 Third Party Advisory, VDB Entry
- nvd.nist.gov Official NVD record