PT-2006-6182 · Php+1 · Php+1

Stefan Esser · Published 2006-11-03 · Updated 2018-10-30 · CVE-2006-5465

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.2.0

Description The issue allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.

Recommendations For PHP versions prior to 5.2.0, update to version 5.2.0 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-5465

DSA-1206-1

RHSA-2006:0730

RHSA-2006:0731

RHSA-2006_0730

Affected Products

Php

Red Hat

References · 54

• http://cisco.com/en/US/products/products_security_response09186a008082c4fe.html · Vendor Advisory
• http://turbolinux.com/security/2006/TLSA-2006-38.txt · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0730.html · Vendor Advisory
• http://openpkg.com/security/advisories/OpenPKG-SA-2006.028.html · Vendor Advisory
• http://trustix.org/errata/2006/0061 · Vendor Advisory
• http://cisco.com/warp/public/707/cisco-air-20070425-http.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5465 · Security Note
• http://security.gentoo.org/glsa/glsa-200703-21.xml · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2006-0736.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:196 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2006-0731.html · Vendor Advisory
• http://ubuntu.com/usn/usn-375-1 · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_67_php.html · Vendor Advisory