PT-2006-5286 · Php+1 · Php+1

Published 2006-08-31 · Updated 2018-10-30 · CVE-2006-4486

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.1.6

Description The issue concerns an integer overflow in memory allocation routines in PHP when running on 64-bit systems. This allows context-dependent attackers to bypass the memory limit restriction.

Recommendations For versions prior to 5.1.6, update to version 5.1.6 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2006-4486

DSA-1331-1

RHSA-2006:0669

RHSA-2006:0688

RHSA-2006_0669

Affected Products

Php

Red Hat

References · 42

• http://secunia.com/advisories/22538 · Vendor Advisory
• http://turbolinux.com/security/2006/TLSA-2006-38.txt · Vendor Advisory
• http://ubuntu.com/usn/usn-362-1 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0669.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_52_php.html · Vendor Advisory
• http://secunia.com/advisories/22487 · Vendor Advisory
• http://secunia.com/advisories/22069 · Vendor Advisory
• http://debian.org/security/2007/dsa-1331 · Vendor Advisory
• http://secunia.com/advisories/22331 · Vendor Advisory
• http://secunia.com/advisories/21546 · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2006-0688.html · Vendor Advisory
• http://hardened-php.net/hphp/changelog.html#hardening_patch_0.4.14 · Patch
• http://redhat.com/support/errata/RHSA-2006-0682.html · Vendor Advisory
• http://secunia.com/advisories/22225 · Vendor Advisory