CVE:CVE-2004-1392
CNNVD:CNNVD-200412-360
带有cURL函数的PHP 4.0版本存在漏洞。远程攻击者可以借助curl_init函数的URL参数字段绕过open_basedir设置并读取任意文件。
solution:Upgrade php php to a higher version than 4.0,4.0.1,4.0.1:patch1,4.0.1:patch2,4.0.2,4.0.3,4.0.3:patch1,4.0.4,4.0.5,4.0.6,4.0.7,4.0.7:rc1,4.0.7:rc2,4.0.7:rc3,and avoid the version 4.0,4.0.1,4.0.1:patch1,4.0.1:patch2,4.0.2,4.0.3,4.0.3:patch1,4.0.4,4.0.5,4.0.6,4.0.7,4.0.7:rc1,4.0.7:rc2,4.0.7:rc3