Vulnerability Description
Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Php | Php | 3.0 |
References
- http://marc.info/?l=bugtraq&m=101286577109716&w=2
- http://marc.info/?l=bugtraq&m=101304702002321&w=2
- http://marc.info/?l=ntbugtraq&m=101285016125377&w=2
- http://marc.info/?l=ntbugtraq&m=101303065423534&w=2
- http://marc.info/?l=ntbugtraq&m=101303819613337&w=2
- http://www.iss.net/security_center/static/8105.phpVendor Advisory
- http://www.securityfocus.com/bid/4026
- http://marc.info/?l=bugtraq&m=101286577109716&w=2
- http://marc.info/?l=bugtraq&m=101304702002321&w=2
- http://marc.info/?l=ntbugtraq&m=101285016125377&w=2
- http://marc.info/?l=ntbugtraq&m=101303065423534&w=2
- http://marc.info/?l=ntbugtraq&m=101303819613337&w=2
- http://www.iss.net/security_center/static/8105.phpVendor Advisory
- http://www.securityfocus.com/bid/4026
FAQ
What is CVE-2002-0229?
CVE-2002-0229 is a vulnerability with a CVSS score of 7.5 (HIGH). Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL...
How severe is CVE-2002-0229?
CVE-2002-0229 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2002-0229?
Check the references section above for vendor advisories and patch information. Affected products include: Php Php.