VulnerabilityModified

CVE-2001-1246

PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote attackers to execute arbitrary commands via shell metacharacters.

HIGH 7.5EPSS 9.72%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (9.72%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 2.0: 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS: 9.72% probability · 95th percentile
CISA KEV: Not listed
Weakness: CWE-88
Affected: php/php
Source: cve@mitre.org

References

http://online.securityfocus.com/archive/1/194425Broken Link, Third Party Advisory, VDB Entry
http://www.iss.net/security_center/static/6787.phpBroken Link, Patch, Vendor Advisory
http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gzBroken Link
http://www.redhat.com/support/errata/RHSA-2002-102.htmlBroken Link
http://www.redhat.com/support/errata/RHSA-2002-129.htmlBroken Link
http://www.redhat.com/support/errata/RHSA-2003-159.htmlBroken Link
http://www.securityfocus.com/bid/2954Broken Link, Third Party Advisory, VDB Entry
http://online.securityfocus.com/archive/1/194425Broken Link, Third Party Advisory, VDB Entry
http://www.iss.net/security_center/static/6787.phpBroken Link, Patch, Vendor Advisory
http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gzBroken Link
http://www.redhat.com/support/errata/RHSA-2002-102.htmlBroken Link
http://www.redhat.com/support/errata/RHSA-2002-129.htmlBroken Link
http://www.redhat.com/support/errata/RHSA-2003-159.htmlBroken Link
http://www.securityfocus.com/bid/2954Broken Link, Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.