CVE-2004-1018: canonical ubuntu_linux
Vulnerability summary
CVE-2004-1018 is a high (CVSS 10.0) vulnerability in canonical ubuntu_linux. EPSS estimates a 16.16% chance of exploitation in the next 30 days, higher than 96.9% of scored vulnerabilities. 2 public exploits are recorded.
Public exploit (exploit-database, 15-12-2004)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 2Timeline
- 08-12-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via (1) a negative offset value to the shmop_write function, (2) an "integer overflow/underflow" in the pack function, or (3) an "integer overflow/underflow" in the unpack function. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
16.16%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
No change 0.00 pp
From 16.16% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
2 foundPHP 3/4/5 - Multiple Local/Remote Vulnerabilities (1)
Maturity: poc
PHP 3/4/5 - Multiple Local/Remote Vulnerabilities (2)
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Canonical1 product
- ubuntu_linuxEOL4.10
Php1 product
- php< 4.3.10
2 vendors · 2 products
References
15 links- www.redhat.com/support/errata/RHSA-2005-032.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10949VDB EntrySignatureX Refsource OVALThird Party Advisory
- www.mandriva.com/security/advisories?name=MDKSA-2005:072Vendor AdvisoryX Refsource MANDRAKEThird Party Advisory
- www.redhat.com/support/errata/RHSA-2005-816.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
- www.mandriva.com/security/advisories?name=MDKSA-2004:151Vendor AdvisoryX Refsource MANDRAKEThird Party Advisory
Show all 15 references
- marc.info?l=bugtraq&m=110314318531298&w=2Mailing ListX Refsource BUGTRAQIssue TrackingThird Party Advisory