CVE-2009-4018
PHP <5.2.11 & 5.3.x <5.3.1 - Command Injection
Title source: llmDescription
The proc_open function in ext/standard/proc_open.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does not enforce the (1) safe_mode_allowed_env_vars and (2) safe_mode_protected_env_vars directives, which allows context-dependent attackers to execute programs with an arbitrary environment via the env parameter, as demonstrated by a crafted value of the LD_LIBRARY_PATH environment variable.
Exploits (1)
References (16)
Scores
EPSS
0.2231
EPSS Percentile
95.8%
Details
CWE
CWE-264
Status
published
Products (35)
php/php
1.0
php/php
2.0
php/php
2.0b10
php/php
3.0
php/php
3.0.1
php/php
3.0.2
php/php
3.0.3
php/php
3.0.4
php/php
3.0.5
php/php
3.0.6
... and 25 more
Published
Nov 29, 2009
Tracked Since
Feb 18, 2026