Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using LOAD DATA INFILE LOCAL SQL statements.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Php | Php | 3.0 (including) | 3.0 (including) |
| Php | Php | 3.0.1 (including) | 3.0.1 (including) |
| Php | Php | 3.0.2 (including) | 3.0.2 (including) |
| Php | Php | 3.0.3 (including) | 3.0.3 (including) |
| Php | Php | 3.0.4 (including) | 3.0.4 (including) |
| Php | Php | 3.0.5 (including) | 3.0.5 (including) |
| Php | Php | 3.0.6 (including) | 3.0.6 (including) |
| Php | Php | 3.0.7 (including) | 3.0.7 (including) |
| Php | Php | 3.0.8 (including) | 3.0.8 (including) |
| Php | Php | 3.0.9 (including) | 3.0.9 (including) |
| Php | Php | 3.0.10 (including) | 3.0.10 (including) |
| Php | Php | 3.0.11 (including) | 3.0.11 (including) |
| Php | Php | 3.0.12 (including) | 3.0.12 (including) |
| Php | Php | 3.0.13 (including) | 3.0.13 (including) |
| Php | Php | 3.0.16 (including) | 3.0.16 (including) |
| Php | Php | 4.0 (including) | 4.0 (including) |
| Php | Php | 4.0.1 (including) | 4.0.1 (including) |
| Php | Php | 4.0.1-patch2 (including) | 4.0.1-patch2 (including) |
| Php | Php | 4.0.3 (including) | 4.0.3 (including) |
| Php | Php | 4.0.4 (including) | 4.0.4 (including) |
| Php | Php | 4.0.5 (including) | 4.0.5 (including) |
| Php | Php | 4.0.6 (including) | 4.0.6 (including) |
| Php | Php | 4.1.0 (including) | 4.1.0 (including) |
| Php | Php | 4.1.2 (including) | 4.1.2 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=101286577109716\u0026w=2
- http://marc.info/?l=bugtraq\u0026m=101304702002321\u0026w=2
- http://marc.info/?l=ntbugtraq\u0026m=101285016125377\u0026w=2
- http://marc.info/?l=ntbugtraq\u0026m=101303065423534\u0026w=2
- http://marc.info/?l=ntbugtraq\u0026m=101303819613337\u0026w=2
- http://www.iss.net/security_center/static/8105.php
- http://www.securityfocus.com/bid/4026
- http://marc.info/?l=bugtraq\u0026m=101286577109716\u0026w=2
- http://marc.info/?l=bugtraq\u0026m=101304702002321\u0026w=2
- http://marc.info/?l=ntbugtraq\u0026m=101285016125377\u0026w=2
- http://marc.info/?l=ntbugtraq\u0026m=101303065423534\u0026w=2
- http://marc.info/?l=ntbugtraq\u0026m=101303819613337\u0026w=2
- http://www.iss.net/security_center/static/8105.php
- http://www.securityfocus.com/bid/4026