CVE-2001-1370

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410
http://marc.info/?l=bugtraq&m=99616122712122&w=2
http://online.securityfocus.com/archive/1/198495
http://www.debian.org/security/2001/dsa-073Patch, Vendor Advisory
http://www.iss.net/security_center/static/6892.phpVendor Advisory
http://www.securityfocus.com/archive/1/198768Vendor Advisory
http://www.securityfocus.com/bid/3079Exploit, Patch, Vendor Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410
http://marc.info/?l=bugtraq&m=99616122712122&w=2
http://online.securityfocus.com/archive/1/198495
http://www.debian.org/security/2001/dsa-073Patch, Vendor Advisory
http://www.iss.net/security_center/static/6892.phpVendor Advisory
http://www.securityfocus.com/archive/1/198768Vendor Advisory
http://www.securityfocus.com/bid/3079Exploit, Patch, Vendor Advisory

Timeline

Published: Jul 21, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-13717.5The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by defaul CVE-2001-13725.0Oracle 9i Application Server 1.0.2 allows remote attackers to obtain the physical path of a file under the server root via a request for a n CVE-2001-13735.0MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with long file names, whi CVE-2001-13747.2expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges vi CVE-2001-13754.6tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local u CVE-2001-13767.5Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and p CVE-2001-13775.0Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers t CVE-2001-13782.1fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files.CVE-2001-13797.5The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attackers to bypass authentic CVE-2001-13807.5OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the ~/.ssh/authorized_keys2 file, may not properly handle CVE-2001-13825.0The "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an additional echo packet after the password and carri CVE-2001-13836.2initscript in setserial 2.17-4 and earlier uses predictable temporary file names, which could allow local users to conduct unauthorized oper