CVE-2004-0530: High severity Slackware Slackware Linux vulnerability
The PHP package in Slackware 8.1, 9.0, and 9.1, when linked against a static library, includes /tmp in the search path, which allows local users to execute arbitrary code as the PHP user by inserting shared libraries into the appropriate path.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0530?
CVE-2004-0530 is considered a high severity vulnerability due to the potential for local users to execute arbitrary code.
How do I fix CVE-2004-0530?
To fix CVE-2004-0530, upgrade the PHP package to a version not affected by this vulnerability on Slackware.
Who is affected by CVE-2004-0530?
CVE-2004-0530 affects users of Slackware Linux versions 8.1, 9.0, and 9.1 when linked against a static library.
What could an attacker do exploiting CVE-2004-0530?
An attacker could exploit CVE-2004-0530 to execute arbitrary code as the PHP user, compromising the system.
Is there a workaround for CVE-2004-0530 if I cannot upgrade?
A possible workaround for CVE-2004-0530 is to remove /tmp from the library search path, but this is not a complete fix.