PT-2006-2502 · Php+1 · Php+1

Maksymilian Arciemowicz · Publicado 2006-04-10 · Atualizado 2024-06-15 · CVE-2006-1494

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: PHP versions 4.4.2 through 5.1.2

Description: The issue allows local users to bypass open basedir restrictions and enables remote attackers to create files in arbitrary directories via the tempnam function. This is a directory traversal vulnerability in the file.c component.

Recommendations: For PHP version 4.4.2, update to a version that fixes this issue. For PHP version 5.1.2, update to a version that fixes this issue. As a temporary workaround, consider restricting access to the tempnam function until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-1494

OPENSUSE-SU-2024:11167-1

OPENSUSE-SU-2024:11169-1

RHSA-2006:0568

RHSA-2006_0568

Produtos afetados

Php

Red Hat

Referências · 140

• 🔥 http://securityreason.com/achievement_securityalert/36 · Exploit
• 🔥 http://secunia.com/advisories/19599 · Exploit
• 🔥 https://exploit-db.com/exploits/27595 · Exploit
• http://secunia.com/advisories/21252 · Nota
• https://suse.com/security/cve/CVE-2005-3392 · Nota
• https://access.redhat.com/security/cve/CVE-2006-1990 · Nota
• http://vupen.com/english/advisories/2006/1290 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25705 · Nota
• https://suse.com/security/cve/CVE-2011-4885 · Nota
• https://suse.com/security/cve/CVE-2012-3365 · Nota
• https://suse.com/security/cve/CVE-2011-4153 · Nota
• https://suse.com/security/cve/CVE-2013-6712 · Nota
• https://access.redhat.com/security/cve/CVE-2006-3017 · Nota
• https://suse.com/security/cve/CVE-2012-2688 · Nota
• http://infigo.hr/en/in_focus/advisories/INFIGO-2006-04-02 · Nota