github - ghsa-8jm5-c7cw-v9hh

ghsa-8jm5-c7cw-v9hh

Vulnerability from github

Published

2022-04-29 01:27

Modified

2022-04-29 01:27

Details

** DISPUTED ** The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server's TCP port. NOTE: the PHP developer has disputed this vulnerability, saying "The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP."

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2003-1307"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2003-12-31T05:00:00Z",
    "severity": "MODERATE"
  },
  "details": "** DISPUTED **  The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server\u0027s process group and use the server\u0027s file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server\u0027s TCP port.  NOTE: the PHP developer has disputed this vulnerability, saying \"The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP.\"",
  "id": "GHSA-8jm5-c7cw-v9hh",
  "modified": "2022-04-29T01:27:52Z",
  "published": "2022-04-29T01:27:52Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2003-1307"
    },
    {
      "type": "WEB",
      "url": "http://bugs.php.net/38915"
    },
    {
      "type": "WEB",
      "url": "http://hackerdom.ru/~dimmo/phpexpl.c"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/348368"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/449234/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/449298/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/9302"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

cve-2003-1307

Vulnerability from cvelistv5

Published

2006-10-23 17:00

Modified

2024-08-08 02:19

Severity ?

Summary

The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server's TCP port. NOTE: the PHP developer has disputed this vulnerability, saying "The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP.

References

▼	URL	Tags
	http://www.securityfocus.com/archive/1/449234/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/449298/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://bugs.php.net/38915	x_refsource_MISC
	http://www.securityfocus.com/archive/1/348368	mailing-list, x_refsource_BUGTRAQ
	http://hackerdom.ru/~dimmo/phpexpl.c	x_refsource_MISC
	http://www.securityfocus.com/bid/9302	vdb-entry, x_refsource_BID

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T02:19:46.131Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20061019 PHP \"exec\", \"system\", \"popen\" problem",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/449234/100/0/threaded"
          },
          {
            "name": "20061020 Re: PHP \"exec\", \"system\", \"popen\" (+small POC)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/449298/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugs.php.net/38915"
          },
          {
            "name": "20031226 Hijacking Apache https by mod_php",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/348368"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://hackerdom.ru/~dimmo/phpexpl.c"
          },
          {
            "name": "9302",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/9302"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2003-12-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server\u0027s process group and use the server\u0027s file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server\u0027s TCP port.  NOTE: the PHP developer has disputed this vulnerability, saying \"The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-19T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20061019 PHP \"exec\", \"system\", \"popen\" problem",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/449234/100/0/threaded"
        },
        {
          "name": "20061020 Re: PHP \"exec\", \"system\", \"popen\" (+small POC)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/449298/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugs.php.net/38915"
        },
        {
          "name": "20031226 Hijacking Apache https by mod_php",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/348368"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://hackerdom.ru/~dimmo/phpexpl.c"
        },
        {
          "name": "9302",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/9302"
        }
      ],
      "tags": [
        "disputed"
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2003-1307",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "** DISPUTED **  The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server\u0027s process group and use the server\u0027s file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server\u0027s TCP port.  NOTE: the PHP developer has disputed this vulnerability, saying \"The opened file descriptors are opened by Apache. It is the job of Apache to protect them ... Not a bug in PHP.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20061019 PHP \"exec\", \"system\", \"popen\" problem",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/449234/100/0/threaded"
            },
            {
              "name": "20061020 Re: PHP \"exec\", \"system\", \"popen\" (+small POC)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/449298/100/0/threaded"
            },
            {
              "name": "http://bugs.php.net/38915",
              "refsource": "MISC",
              "url": "http://bugs.php.net/38915"
            },
            {
              "name": "20031226 Hijacking Apache https by mod_php",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/348368"
            },
            {
              "name": "http://hackerdom.ru/~dimmo/phpexpl.c",
              "refsource": "MISC",
              "url": "http://hackerdom.ru/~dimmo/phpexpl.c"
            },
            {
              "name": "9302",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/9302"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2003-1307",
    "datePublished": "2006-10-23T17:00:00",
    "dateReserved": "2006-10-23T00:00:00",
    "dateUpdated": "2024-08-08T02:19:46.131Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted