critical10.0Public exploit code

CVE-2004-1018

Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code vi…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

PHP 3/4/5 - Multiple Local/Remote Vulnerabilities (2)2004-12-15 · dos · php · Verified
PHP 3/4/5 - Multiple Local/Remote Vulnerabilities (1)2004-12-15 · dos · php · Verified

Impact

Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via (1) a negative offset value to the shmop_write function, (2) an "integer overflow/underflow" in the pack function, or (3) an "integer overflow/underflow" in the unpack function. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.

Affected products

Vendor	Product	Affected versions
Php	Php	before 4.3.10
Canonical	Ubuntu Linux	Version 4.10

Public exploit code

Impact

Affected products

References