CVE-2004-0530 in PHP

Summary

The PHP package in Slackware 8.1, 9.0, and 9.1, when linked against a static library, includes /tmp in the search path, which allows local users to execute arbitrary code as the PHP user by inserting shared libraries into the appropriate path.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 06/04/2004
• Disclosure: 08/06/2004
• Moderation: VulDB entry created
• Entries: 1: VDB-22031
• CPE: ready
• CWE: CWE-269 (Confirmed)
• CVSS: 8.4
• EPSS: 0.00059
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-0530
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-0530
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-0530/