CVE-2001-1247

Published: Dec 6, 2001Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the error_log function to access the files.

Affected (2)

Products: Php: Php

Php

1 product

Php

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Php Php	Version 4.0.4pl1
Php Php	Version 4.0.5

Related CWEs

CWE-264

References (8)

http://online.securityfocus.com/archive/1/194425

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.osvdb.org/5440

Source: cve@mitre.org

http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gz

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2002-035.html

Source: cve@mitre.org

PatchVendor Advisory

http://online.securityfocus.com/archive/1/194425

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.osvdb.org/5440

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gz

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2002-035.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.