CVE-2004-1020: Medium severity PHP PHP vulnerability

Published Dec 8, 2004

Updated

The addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may allow remote attackers to read arbitrary files in PHP applications that contain a directory traversal vulnerability in require or include statements, but are otherwise protected by the magicquotesgpc mechanism. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.

Affected Software

10 affected components

PHP PHP=4.3.9

PHP PHP=5.0-rc1

PHP PHP=4.3.6

PHP PHP=5.0.1

PHP PHP=4.3.7

PHP PHP=5.0-rc3

PHP PHP=5.0-rc2

PHP PHP=5.0.2

PHP PHP=5.0.0

PHP PHP=4.3.8

Remediation

Patch Available

http://www.securityfocus.com/bid/11981

Event History

Dec 8, 2004

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Jan 10, 2005

Rejected

05:00 AM

Frequently Asked Questions

What is the severity of CVE-2004-1020?

CVE-2004-1020 is considered a critical vulnerability due to its potential to allow remote file read access.

How do I fix CVE-2004-1020?

To fix CVE-2004-1020, upgrade your PHP version to one that is not affected, such as PHP 5.0.3 or later.

What versions of PHP are affected by CVE-2004-1020?

CVE-2004-1020 affects PHP versions 4.3.6 to 4.3.9 and beta versions of 5.0 up to 5.0.2.

What type of attacks can exploit CVE-2004-1020?

CVE-2004-1020 can be exploited through remote code execution techniques, particularly directory traversal attacks.

Are there any mitigations for CVE-2004-1020?

Mitigations for CVE-2004-1020 include disabling the use of the addslashes function in PHP and rigorously filtering input for file inclusion operations.