CVE-2004-1064: Critical severity PHP PHP vulnerability
The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attackers to bypass safe mode. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1064?
The severity of CVE-2004-1064 is generally considered high due to its potential to bypass PHP safe mode security restrictions.
How does CVE-2004-1064 affect PHP versions?
CVE-2004-1064 affects PHP versions 4.x through 4.3.9 and 5.x through 5.0.2, allowing for unsafe file access.
What are the potential risks associated with CVE-2004-1064?
The potential risks associated with CVE-2004-1064 include unauthorized access to files and exploitation of the PHP environment.
How can I mitigate the risks of CVE-2004-1064?
To mitigate the risks of CVE-2004-1064, consider upgrading to a secure version of PHP that is not affected by this vulnerability.
Is there a patch available for CVE-2004-1064?
No specific patch is available for CVE-2004-1064; upgrading to a non-affected version is recommended.