Unscored DSA-168 2 CVEs

php - bypassing safe_mode, CRLF injection

Published Sep 18, 2002 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 3.0	php3	3.0.18-23.1woody1
Debian · 3.0	php4	4.1.2-5

Vulnerabilities 2

Unscored —

CVE-2002-0985

Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode rest…

Sep 1, 2004
Unscored —

CVE-2002-0986

The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow re…

Sep 1, 2004