CVEvulnerability
CVE-2004-0530
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-08-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The PHP package in Slackware 8.1, 9.0, and 9.1, when linked against a static library, includes /tmp in the search path, which allows local users to execute arbitrary code as the PHP user by inserting shared libraries into the appropriate path.
References
- http://secunia.com/advisories/11760 secunia.com
- http://www.securityfocus.com/bid/10461 www.securityfocus.com
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.419765 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16310 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/11760 secunia.com
- http://www.securityfocus.com/bid/10461 www.securityfocus.com
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.419765 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16310 exchange.xforce.ibmcloud.com