CVE-2006-4481 in PHP

Résumé (Anglaise)

The (1) file_exists and (2) imap_reopen functions in PHP before 5.1.5 do not check for the safe_mode and open_basedir settings, which allows local users to bypass the settings. NOTE: the error_log function is covered by CVE-2006-3011, and the imap_open function is covered by CVE-2006-1017.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Réserver

31/08/2006

Divulgation

31/08/2006

Statut

Confirmé

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
2470	PHP buffer overflow	119	Preuve de concept	Correctif officiel	CVE-2006-4481
2469	PHP stripos buffer overflow	119	Preuve de concept	Correctif officiel	CVE-2006-4481
2468	PHP GD Extension buffer overflow	119	Preuve de concept	Correctif officiel	CVE-2006-4481
2467	PHP buffer overflow	119	Preuve de concept	Correctif officiel	CVE-2006-4481
2466	PHP wordwrap buffer overflow	119	Preuve de concept	Correctif officiel	CVE-2006-4481

Sources

• MITRE
• NVD
• CVE Details