CVE-2004-1064

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-01-10 · updated 2026-06-16

Description

The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attackers to bypass safe mode. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.

Affected products

Canonical Ubuntu Linux: 4.10
PHP: from 4.0.0 through 4.3.9; from 5.0.0 through 5.0.2

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000915
http://www.gentoo.org/security/en/glsa/glsa-200412-14.xml
http://www.hardened-php.net/advisories/012004.txt
http://www.mandriva.com/security/advisories?name=MDKSA-2004:151
http://www.mandriva.com/security/advisories?name=MDKSA-2005:072
http://www.php.net/release_4_3_10.php
http://www.securityfocus.com/advisories/9028
http://www.securityfocus.com/archive/1/384545
http://www.securityfocus.com/bid/11964
https://exchange.xforce.ibmcloud.com/vulnerabilities/18512
https://www.ubuntu.com/usn/usn-99-1/
https://www.ubuntu.com/usn/usn-99-2/

Get alerted when CVE-2004-1064 or the next vulnerability affects your stack