PT-2006-6994 · Php · Php

Maksymilian Arciemowicz · Published 2006-12-10 · Updated 2018-10-17 · CVE-2006-6383

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions 4.4 through 5.2.0

Description The issue allows local users to bypass safe mode and open basedir restrictions. This is achieved by providing a malicious path and a null byte before a ";" in a session save path argument, followed by an allowed path. The parsing inconsistency causes PHP to validate the allowed path but set session.save path to the malicious path.

Recommendations For PHP versions 4.4 through 5.2.0, consider updating to a version where this issue is resolved, as using a malicious path in the session save path argument can lead to security bypasses. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2006-6383

Affected Products

Php

References · 14

• 🔥 http://securityfocus.com/bid/21508 · Exploit
• 🔥 http://securityreason.com/achievement_securityalert/43 · Exploit
• 🔥 https://exploit-db.com/exploits/29239 · Exploit
• http://secunia.com/advisories/24514 · Vendor Advisory
• http://secunia.com/advisories/24022 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6383 · Security Note
• http://openpkg.com/security/advisories/OpenPKG-SA-2007.010.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:038 · Vendor Advisory
• http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html · Vendor Advisory
• http://securityfocus.com/archive/1/archive/1/453938/100/0/threaded · Note
• http://cvs.php.net/viewcvs.cgi/php-src/ext/session/session.c?r1=1.336.2.53.2.7&r2=1.336.2.53.2.8 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6383 · Note
• http://securityfocus.com/archive/1/453938/30/9270/threaded · Note
• http://securityreason.com/securityalert/2000 · Note