critical9.3Public exploit code
CVE-2004-2692
The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP 4.3.7 - 'php-exec-dir' Patch Command Access Restriction Bypass2004-08-08 · webapps · php · Verified
Impact
The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick operator, which is not handled using the php_escape_shell_cmd function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kyberdigi Labs | Php-Exec-Dir | Versions 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://kyberdigi.cz/projects/execdir/english.html
- http://seclists.org/fulldisclosure/2004/Jul/0347.html
- http://seclists.org/fulldisclosure/2004/Jul/0350.html
- http://seclists.org/fulldisclosure/2004/Jul/0357.html
- http://secunia.com/advisories/11928
- http://www.osvdb.org/7243
- http://www.securityfocus.com/bid/10598
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16498
- http://kyberdigi.cz/projects/execdir/english.html
- http://seclists.org/fulldisclosure/2004/Jul/0347.html
- http://seclists.org/fulldisclosure/2004/Jul/0350.html
- http://seclists.org/fulldisclosure/2004/Jul/0357.html
- http://secunia.com/advisories/11928
- http://www.osvdb.org/7243
- http://www.securityfocus.com/bid/10598
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16498