CVE-2002-0229

Published May 16, 2002

Last updated 8 years ago

Overview

Description: Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "245C601D-0FE7-47E3-8304-6FF45E9567D6"
          },
          {
            "criteria": "cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "691BB8BB-329A-4640-B758-7590C99B5E42"
          },
          {
            "criteria": "cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E2BC4CCE-2774-463E-82EA-36CD442D3A7B"
          },
          {
            "criteria": "cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C478024C-2FCD-463F-A75E-E04660AA9DF1"
          },
          {
            "criteria": "cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"
          },
          {
            "criteria": "cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"
          },
          {
            "criteria": "cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1851ADE5-C70C-46E0-941A-6ADF7DB5C126"
          },
          {
            "criteria": "cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "69DA3BA2-AF53-4C9D-93FA-0317841595B1"
          },
          {
            "criteria": "cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"
          },
          {
            "criteria": "cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "67B59D6A-7EDA-4C34-81D6-C2557C85D164"
          },
          {
            "criteria": "cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AEBA40B6-8FDF-41AA-8166-F491FF7F3118"
          },
          {
            "criteria": "cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E74E2B72-A428-4BB3-B6F8-0AF5E487A807"
          },
          {
            "criteria": "cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"
          },
          {
            "criteria": "cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "945FF149-3446-4905-BCA1-C397E3497B58"
          },
          {
            "criteria": "cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "80E31CC6-9356-4BB7-9F49-320AAF341E1E"
          },
          {
            "criteria": "cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EDBEC461-D553-41B7-8D85-20B6A933C21C"
          },
          {
            "criteria": "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
          },
          {
            "criteria": "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "37896E87-95C2-4039-8362-BC03B1C56706"
          },
          {
            "criteria": "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "57B59616-A309-40B4-94B1-50A7BC00E35C"
          },
          {
            "criteria": "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0F39A1B1-416E-4436-8007-733B66904A14"
          },
          {
            "criteria": "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
          },
          {
            "criteria": "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
          },
          {
            "criteria": "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6713614A-B14E-4A85-BF89-ED780068FC68"
          },
          {
            "criteria": "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References