CVE catalog
CVE-2002-0985
php - bypassing safe_mode, CRLF injection
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 2.95% · Oct 25, 2026
Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g. sendmail) in the 5th argument to mail(), altering MTA behavior and possibly executing commands. security flaw
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | php3 | 3.0 | 3.0.18-23.1woody1 | fixed |
| Debian | php4 | 3.0 | 4.1.2-5 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | php3 | deb | 3.0 | 3.0.18-23.1woody1 | Not reported | DSA-168 | Not reported |
| Debian | php4 | deb | 3.0 | 4.1.2-5 | Not reported | DSA-168 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: