CVE Vulnerabilities

CVE-2004-2692

Published: Dec 31, 2004 | Modified: Jul 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick operator, which is not handled using the php_escape_shell_cmd function.

Affected Software

Name Vendor Start Version End Version
Php-exec-dir Kyberdigi_labs 4.3.2 4.3.2
Php-exec-dir Kyberdigi_labs 4.3.3 4.3.3
Php-exec-dir Kyberdigi_labs 4.3.4 4.3.4
Php-exec-dir Kyberdigi_labs 4.3.5 4.3.5
Php-exec-dir Kyberdigi_labs 4.3.6 4.3.6
Php-exec-dir Kyberdigi_labs 4.3.7 4.3.7

References