{"schemaVersion":3,"id":"CVE-2002-0985","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g. sendmail) in the 5th argument to mail(), altering MTA behavior and possibly executing commands.","dates":{"published":"2004-09-01T04:00:00.000Z","modified":"2024-08-08T03:12:16.384Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02951,"percentile":0.87052,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.02951},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.02951,"percentile":0.87052}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.02951,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.02951,"percentile":0.87052}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-88","name":"Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')","description":"The product constructs a string for a command to be executed by a separate component\nin another control sphere, but it does not properly delimit the\nintended arguments, options, or switches within that command string.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/88.html"}],"affected":[{"vendor":"openpkg","product":"openpkg","name":"openpkg","label":"openpkg","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.1","noFixRecorded":false,"fixedIn":null},{"text":"1.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.1 | 1.2","eol":null,"hubHref":"/vendor/openpkg/openpkg"},{"vendor":"php","product":"php","name":"php","label":"php","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 4.0, ≤ 4.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 4.0, ≤ 4.2.2","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"php","label":"PHP","category":"lang"}},"hubHref":"/vendor/php/php"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://marc.info/?l=bugtraq&m=105760591228031&w=2","label":"marc.info?l=bugtraq&m=105760591228031&w=2","hostname":"marc.info","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory"]},{"url":"http://www.debian.org/security/2002/dsa-168","label":"www.debian.org/security/2002/dsa-168","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Broken Link","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9966","label":"exchange.xforce.ibmcloud.com/vulnerabilities/9966","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=103011916928204&w=2","label":"marc.info?l=bugtraq&m=103011916928204&w=2","hostname":"marc.info","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-243.html","label":"www.redhat.com/support/errata/RHSA-2002-243.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-159.html","label":"www.redhat.com/support/errata/RHSA-2003-159.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Broken Link"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:082","label":"www.mandrakesoft.com/security/advisories?name=MDKSA-2003:082","hostname":"www.mandrakesoft.com","tags":["Vendor Advisory","X Refsource MANDRAKE","Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2002_036_modphp4.html","label":"www.novell.com/linux/security/advisories/2002_036_modphp4.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE","Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000545","label":"distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000545","hostname":"distro.conectiva.com.br","tags":["Vendor Advisory","X Refsource CONECTIVA","Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-213.html","label":"www.redhat.com/support/errata/RHSA-2002-213.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Broken Link","Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-248.html","label":"www.redhat.com/support/errata/RHSA-2002-248.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-244.html","label":"www.redhat.com/support/errata/RHSA-2002-244.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Broken Link"]},{"url":"http://www.osvdb.org/2111","label":"www.osvdb.org/2111","hostname":"www.osvdb.org","tags":["VDB Entry","X Refsource OSVDB","Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2002-214.html","label":"www.redhat.com/support/errata/RHSA-2002-214.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Broken Link"]}],"lineage":{"upstream":[],"downstream":["DSA-168"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2004-09-01T04:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-08T03:12:16.384Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T19:44:47.661Z","stale":false,"partial":false}}