CVE-2006-0144: Code Injection
The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code by redirecting go-pear.php to a malicious proxy server that provides a modified version of Tar.php with a malicious extractModify function.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0144?
CVE-2006-0144 has a high severity rating due to its potential for remote code execution.
How do I fix CVE-2006-0144?
To fix CVE-2006-0144, ensure that you do not use outdated versions of PHP PEAR and avoid configuring the proxy server feature.
Which versions of PHP PEAR are affected by CVE-2006-0144?
CVE-2006-0144 specifically affects PHP PEAR version 0.2.2.
Who is affected by CVE-2006-0144?
Users of PHP PEAR 0.2.2 and Apache2Triad who have the proxy server feature enabled are affected by CVE-2006-0144.
What kind of attack does CVE-2006-0144 enable?
CVE-2006-0144 enables remote attackers to execute arbitrary PHP code through a malicious proxy server.