CVE-2002-0229

HIGH

Description

Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements.

References

http://marc.info/?l=bugtraq&m=101286577109716&w=2

http://marc.info/?l=bugtraq&m=101304702002321&w=2

http://marc.info/?l=ntbugtraq&m=101285016125377&w=2

http://marc.info/?l=ntbugtraq&m=101303065423534&w=2

http://marc.info/?l=ntbugtraq&m=101303819613337&w=2

http://www.iss.net/security_center/static/8105.php

http://www.securityfocus.com/bid/4026

Details

Source: MITRE

Published: 2002-05-16

Updated: 2016-10-18

Risk Information

CVSS v2.0

Base Score: 7.5

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 10

Severity: HIGH