Lucene search
HistoryNov 17, 2003 - 5:00 a.m.
CVE-2003-0863
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
Low
EPSS
0.059
Percentile
93.5%
The php_check_safe_mode_include_dir function in fopen_wrappers.c of PHP 4.3.x returns a success value (0) when the safe_mode_include_dir variable is not specified in configuration, which differs from the previous failure value and may allow remote attackers to exploit file include vulnerabilities in PHP applications.
Affected configurations
Node
phpphpMatch4.3.0
ORphpphpMatch4.3.1
ORphpphpMatch4.3.2
References
Related
nessus
nessus
PHP < 4.3.3 php_check_safe_mode_include_dir Function Safemode Bypass
2003-07-25 00:00:00
Mac OS X Multiple Vulnerabilities (Security Update 2005-001)
2005-01-26 00:00:00
redhatcve
redhatcve
CVE-2003-0863
2015-10-30 10:20:37
cve
cve
CVE-2003-0863
2003-11-17 05:00:00
cvelist
cvelist
CVE-2003-0863
2003-10-15 04:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
Low
EPSS
0.059
Percentile
93.5%
Related for NVD:CVE-2003-0863