CVE-2004-0530

CVE-2004-0530 describes a local privilege escalation vulnerability in the PHP package within Slackware versions 8.1, 9.0, and 9.1. When PHP is linked against a static library, it insecurely includes /tmp in its search path, allowing a local attacker to execute arbitrary code as the PHP user by placing malicious shared libraries in that directory. This vulnerability has a CVSS score of 7.2, indicating high severity with low attack complexity and requiring local access to achieve complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.