2.6
CVSSv2

CVE-2006-1494

Published: 10/04/2006 Updated: 30/10/2018
CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9
VMScore: 265
Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N

Vulnerability Summary

Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote malicious users to create files in arbitrary directories via the tempnam function.

Vulnerable Product Search on Vulmon Subscribe to Product

php php 4.0

php php 4.0.0

php php 4.0.4

php php 4.1.2

php php 4.2.0

php php 4.3.10

php php 4.0.1

php php 4.0.2

php php 4.0.7

php php 4.2.3

php php 4.2

php php 4.3.4

php php 4.3.5

php php 5.0.0

php php 5.0.1

php php 5.0.2

php php 5.1.0

php php 4.0.5

php php 4.0.6

php php 4.2.1

php php 4.2.2

php php 4.3.2

php php 4.3.3

php php 4.4.1

php php 4.4.2

php php 5.0

php php 4.0.3

php php 4.1.0

php php 4.1.1

php php 4.3.0

php php 4.3.1

php php 4.3.6

php php 4.3.7

php php 5.0.3

php php 5.0.4

php php 5.1.1

php php 5.1.2

php php 4.3.11

php php 4.3.8

php php 4.3.9

php php 4.4.0

php php 5.0.5

Vendor Advisories

Debian Bug report logs - #361855 [CVE-2006-1494] tempnam() open_basedir bypass Package: php4; Maintainer for php4 is (unknown); Reported by: Oliver Paulus <oliver@code-projectorg> Date: Mon, 10 Apr 2006 19:33:11 UTC Severity: important Tags: patch, security Found in version php4/4:4310-16 Done: sean finney <seanius ...
The phpinfo() PHP function did not properly sanitize long strings A remote attacker could use this to perform cross-site scripting attacks against sites that have publicly-available PHP scripts that call phpinfo() Please note that it is not recommended to publicly expose phpinfo() (CVE-2006-0996) ...

Exploits

source: wwwsecurityfocuscom/bid/17439/info PHP is prone to multiple 'safe_mode' and 'open_basedir' restriction-bypass vulnerabilities Successful exploits could allow an attacker to access sensitive information or to write files in unauthorized locations These vulnerabilities would be an issue in shared-hosting configurations where mult ...