CVE-2002-0229: High severity PHP PHP vulnerability

Published May 3, 2002

Updated

Safe Mode feature (safemode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements.

Affected Software

24 affected components

PHP PHP=3.0

PHP PHP=3.0.5

PHP PHP=3.0.11

PHP PHP=3.0.1

PHP PHP=3.0.2

PHP PHP=4.1.0

PHP PHP=4.0.4

PHP PHP=4.0.5

PHP PHP=3.0.8

PHP PHP=3.0.13

PHP PHP=3.0.7

PHP PHP=3.0.6

PHP PHP=3.0.16

PHP PHP=3.0.10

PHP PHP=3.0.4

PHP PHP=4.0

PHP PHP=4.0.1-patch2

PHP PHP=4.0.6

PHP PHP=4.1.2

PHP PHP=4.0.1

PHP PHP=3.0.12

PHP PHP=4.0.3

PHP PHP=3.0.9

PHP PHP=3.0.3

Event History

May 3, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0229?

CVE-2002-0229 is considered a critical vulnerability due to its potential for unauthorized file access.

How do I fix CVE-2002-0229?

To fix CVE-2002-0229, upgrade to a version of PHP later than 4.1.0 where the vulnerability has been resolved.

Which versions of PHP are affected by CVE-2002-0229?

CVE-2002-0229 affects PHP versions from 3.0 through 4.1.0, including various 3.0.x and 4.0.x releases.

What is the impact of exploiting CVE-2002-0229?

Exploiting CVE-2002-0229 allows attackers to bypass Safe Mode restrictions and read arbitrary files from the server.

How can I mitigate the risks of CVE-2002-0229?

To mitigate risks associated with CVE-2002-0229, disable 'LOAD DATA INFILE LOCAL' in MySQL configurations if upgrading is not immediately feasible.