PT-2006-5410 · Php+1 · Php+1

Maksymilian Arciemowicz · Published 2006-09-12 · Updated 2018-10-30 · CVE-2006-4625

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP versions 4.x up to 4.4.4 PHP versions 5 up to 5.1.6

Description The issue allows local users to bypass certain Apache HTTP Server httpd.conf options. This is achieved via the ini restore function, which resets the values to their php.ini (Master Value) defaults, affecting options such as safe mode and open basedir.

Recommendations For PHP versions 4.x up to 4.4.4, consider updating to a version where this issue is resolved. For PHP versions 5 up to 5.1.6, consider updating to a version where this issue is resolved. As a temporary workaround, consider restricting the use of the ini restore function to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-4625

Affected Products

Apache Http Server

Php

References · 25

• 🔥 https://exploit-db.com/exploits/28504 · Exploit
• 🔥 http://securityfocus.com/bid/19933 · Exploit
• 🔥 http://securityreason.com/achievement_securityalert/42 · Exploit
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 · Vendor Advisory
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 · Vendor Advisory
• http://securityfocus.com/archive/1/448953/100/0/threaded · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:185 · Vendor Advisory
• http://lists.suse.com/archive/suse-security-announce/2006-Oct/0002.html · Vendor Advisory
• http://turbolinux.com/security/2006/TLSA-2006-38.txt · Vendor Advisory
• http://ubuntu.com/usn/usn-362-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4625 · Security Note
• http://securityfocus.com/archive/1/445882/100/0/threaded · Note
• http://secunia.com/advisories/22338 · Note
• http://secunia.com/advisories/22282 · Note
• http://secunia.com/advisories/25850 · Note