PT-2006-6994 · Php · Php

Maksymilian Arciemowicz

·

Publicado

2006-12-10

·

Atualizado

2018-10-17

·

CVE-2006-6383

CVSS v2.0

4.6

Média

VetorAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions PHP versions 4.4 through 5.2.0
Description The issue allows local users to bypass safe mode and open basedir restrictions. This is achieved by providing a malicious path and a null byte before a ";" in a session save path argument, followed by an allowed path. The parsing inconsistency causes PHP to validate the allowed path but set session.save path to the malicious path.
Recommendations For PHP versions 4.4 through 5.2.0, consider updating to a version where this issue is resolved, as using a malicious path in the session save path argument can lead to security bypasses. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2006-6383

Produtos afetados

Php