PT-2006-5281 · Php · Php

Publicado 2006-08-31 · Atualizado 2018-10-30 · CVE-2006-4481

Mitre

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

The (1) file exists and (2) imap reopen functions in PHP before 5.1.5 do not check for the safe mode and open basedir settings, which allows local users to bypass the settings. NOTE: the error log function is covered by CVE-2006-3011, and the imap open function is covered by CVE-2006-1017.

Correção

Identificadores relacionados

CVE-2006-4481

Produtos afetados

Php

Referências · 14

• http://secunia.com/advisories/21842 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-4481 · Nota de Segurança
• http://secunia.com/advisories/21546 · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2006_52_php.html · Aviso do Fabricante
• http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:162 · Nota
• http://vupen.com/english/advisories/2006/3318 · Nota
• http://securityfocus.com/bid/19582 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2006:162 · Aviso do Fabricante
• http://ubuntu.com/usn/usn-342-1 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4481 · Nota
• http://secunia.com/advisories/21768 · Aviso do Fabricante
• http://frsirt.com/english/advisories/2006/3318 · Nota
• http://secunia.com/advisories/22039 · Nota
• http://php.net/release_5_1_5.php · Correção