Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2002-0985
HistorySep 01, 2004 - 4:00 a.m.

CVE-2002-0985

2004-09-0104:00:00
CWE-88
[email protected]
web.nvd.nist.gov
41
cve-2002-0985
php
argument injection
vulnerability
mail function
bypass
safe mode
mta
sendmail

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

87.1%

JSON

Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g. sendmail) in the 5th argument to mail(), altering MTA behavior and possibly executing commands.

Affected configurations

NVD
Node
phpphpRange4.0–4.2.2
Node
openpkgopenpkgMatch1.1
OR
openpkgopenpkgMatch1.2
CPENameOperatorVersion
php:phpphple4.2.2

Related

cvelist 1
nvd 1
nessus 6
suse 1
openvas 4
redhat 1
debian 2
osv 1
cvelist
cvelist
CVE-2002-0985
2004-09-01 04:00:00
nvd
nvd
CVE-2002-0985
2002-09-24 04:00:00
nessus
nessus
SUSE-SA:2002:036: mod_php4
2004-07-25 00:00:00
RHEL 2.1 : php (RHSA-2002:214)
2004-07-06 00:00:00
PHP < 4.2.x mail Function CRLF Injection
2002-07-22 00:00:00
suse
suse
remote privilege escalation in mod_php4
2002-10-07 09:30:00
openvas
openvas
Debian Security Advisory DSA 168-1 (PHP3, PHP4)
2008-01-17 00:00:00
Debian Security Advisory DSA 168-1 (PHP3, PHP4)
2008-01-17 00:00:00
PHP Mail Function Header Spoofing Vulnerability
2005-11-03 00:00:00
redhat
redhat
(RHSA-2002:214) php security update
2003-02-06 00:00:00
debian
debian
[SECURITY] [DSA 168-1] New PHP packages fix several vulnerabilities
2002-09-18 13:40:51
[SECURITY] [DSA 168-1] New PHP packages fix several vulnerabilities
2002-09-18 13:40:51
osv
osv
php - bypassing safe_mode, CRLF injection
2002-09-18 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.015 Low

EPSS

Percentile

87.1%

JSON
Related for CVE-2002-0985
cvelist1nvd1nessus6suse1openvas4redhat1debian2osv1