Description

PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to the curl_init function.

Remediation

References

CVE-2004-1392

Related Vulnerabilities

OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-0799)

Jenkins Improper Input Validation Vulnerability (CVE-2017-1000401)

WordPress Plugin Simple Yearly Archive Cross-Site Scripting (2.1.8)

MySQL CVE-2018-3077 Vulnerability (CVE-2018-3077)

Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2004-0488)

Severity

Medium

Classification

CVE-2004-1392

Tags

Missing Update Known Vulnerabilities