CVE-2004-1064

Description

The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attackers to bypass safe mode. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.

10.0

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 1.82% Top 20%

Vendor Advisory mandriva.com Vendor Advisory mandriva.com Vendor Advisory com.br Vendor Advisory gentoo.org Vendor Advisory ubuntu.com Vendor Advisory securityfocus.com Vendor Advisory ubuntu.com Vendor Advisory php.net

Affected: n/a n/a

References

Link	Tags
http://www.mandriva.com/security/advisories?name=MDKSA-2005:072	third party advisory vendor advisory
http://www.securityfocus.com/bid/11964	vdb entry third party advisory
http://www.php.net/release_4_3_10.php	release notes vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:151	third party advisory vendor advisory
http://www.hardened-php.net/advisories/012004.txt	third party advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18512	vdb entry third party advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000915	vendor advisory broken link
http://www.gentoo.org/security/en/glsa/glsa-200412-14.xml	third party advisory vendor advisory
http://www.securityfocus.com/archive/1/384545	mailing list vdb entry third party advisory
https://www.ubuntu.com/usn/usn-99-2/	third party advisory vendor advisory
http://www.securityfocus.com/advisories/9028	vdb entry third party advisory vendor advisory
https://www.ubuntu.com/usn/usn-99-1/	third party advisory vendor advisory

Frequently Asked Questions

What is the severity of CVE-2004-1064?: CVE-2004-1064 has been scored as a critical severity vulnerability.
How to fix CVE-2004-1064?: To fix CVE-2004-1064, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2004-1064 being actively exploited in the wild?: It is possible that CVE-2004-1064 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~2% probability that this vulnerability will be exploited by malicious actors in the next 30 days.