CVE-2004-1392 Path traversal in n/a
Remote attackers can bypass open_basedir restrictions to read arbitrary files using file URLs in PHP cURL functions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2004-1392?
CVE-2004-1392 is a medium-severity path traversal vulnerability in Php Php, published on 6 Feb 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to the curl_init function.
Which versions are affected by CVE-2004-1392?
It affects 1 product.
Products include Php Php.
How do I fix CVE-2004-1392?
Upgrade to a fixed version.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2004-1392 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2004-1392 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Php Php
Sources
Also known as GHSA-5h5w-vq2m-cxf3.