PT-2006-4252 · Phpsysinfo · Phpsysinfo

Published 2006-07-06 · Updated 2023-03-28 · CVE-2006-3360

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpSysInfo versions 2.5.1 through 3.2.4

Description The issue allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter. This will display a different error message if the file exists.

Recommendations For phpSysInfo versions 2.5.1 through 3.2.4, update to version 3.2.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the lng parameter in the index.php file until a patch is available.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2006-3360

GHSA-2WXV-3G4V-P76P

Affected Products

Phpsysinfo

References · 20

• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0066.html · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0065.html · Exploit
• https://osv.dev/vulnerability/GHSA-2wxv-3g4v-p76p · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-3360 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-3360 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-3360 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-3360 · Vendor Advisory
• http://secunia.com/advisories/20939 · Vendor Advisory
• https://github.com/phpsysinfo/phpsysinfo/issues/368#issuecomment-1380842745 · Note
• https://github.com/phpsysinfo/phpsysinfo/commit/60b5bbb5d1cc17f44050e99a3e746f55a4fd4e18 · Note
• https://github.com/phpsysinfo/phpsysinfo/issues/107 · Note
• https://github.com/phpsysinfo/phpsysinfo · Note
• http://securityfocus.com/bid/18868 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27527 · Note
• http://securitytracker.com/id?1016440 · Note