CVE-2001-1247: Medium severity PHP PHP vulnerability
Published Dec 6, 2001
·Updated
PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the errorlog function to access the files.
Affected Software
2 affected components
PHP PHP=4.0.5
PHP PHP=4.0.4pl1
Remediation
Patch Available
Patch Available
Event History
Dec 6, 2001
CVE Published
05:00 AM
Jun 25, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1247?
CVE-2001-1247 is considered a high severity vulnerability due to its potential for unauthorized remote file access.
2
How do I fix CVE-2001-1247?
To fix CVE-2001-1247, upgrade PHP to version 4.1.2 or higher, where this vulnerability has been addressed.
3
What versions are affected by CVE-2001-1247?
CVE-2001-1247 affects PHP versions 4.0.4pl1 and 4.0.5.
4
Can CVE-2001-1247 be exploited remotely?
Yes, CVE-2001-1247 can be exploited remotely by attackers who upload malicious PHP scripts to read and write server files.
5
What is the impact of CVE-2001-1247?
The impact of CVE-2001-1247 includes unauthorized access to sensitive files on the server, which may lead to data exposure or modification.