PT-2006-2502 · Php+1 · Php+1

Maksymilian Arciemowicz · Published 2006-04-10 · Updated 2024-06-15 · CVE-2006-1494

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: PHP versions 4.4.2 through 5.1.2

Description: The issue allows local users to bypass open basedir restrictions and enables remote attackers to create files in arbitrary directories via the tempnam function. This is a directory traversal vulnerability in the file.c component.

Recommendations: For PHP version 4.4.2, update to a version that fixes this issue. For PHP version 5.1.2, update to a version that fixes this issue. As a temporary workaround, consider restricting access to the tempnam function until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2006-1494

OPENSUSE-SU-2024:11167-1

OPENSUSE-SU-2024:11169-1

RHSA-2006:0568

RHSA-2006_0568

Affected Products

Php

Red Hat

References · 140

• 🔥 http://securityreason.com/achievement_securityalert/36 · Exploit
• 🔥 http://secunia.com/advisories/19599 · Exploit
• 🔥 https://exploit-db.com/exploits/27595 · Exploit
• http://mandriva.com/security/advisories?name=MDKSA-2006:074 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11169-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1494 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:11167-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2006-0549.html · Vendor Advisory
• http://ubuntu.com/usn/usn-320-1 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0567.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0568.html · Vendor Advisory
• http://novell.com/linux/security/advisories/05-05-2006.html · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U · Vendor Advisory
• http://secunia.com/advisories/21252 · Note
• https://suse.com/security/cve/CVE-2005-3392 · Note