CVE-2006-0868: PEAR::Auth potential authentication bypass vulnerability
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."
Other sources
PEAR::Auth potential authentication bypass vulnerability
— Packagist
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/pear/authto a version that resolves this vulnerability.Fixed in 1.3.0r4 - Upgrade
Upgrade
composer/pear/authto a version that resolves this vulnerability.Fixed in 1.2.4
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0868?
CVE-2006-0868 is classified as a critical vulnerability due to its potential for authentication credential falsification.
How do I fix CVE-2006-0868?
To remediate CVE-2006-0868, upgrade to PEAR::Auth version 1.2.4 or later, or 1.3.0r4 or later.
What software is affected by CVE-2006-0868?
CVE-2006-0868 affects multiple versions of PEAR::Auth, including versions prior to 1.2.4 and 1.3.x before 1.3.0r4.
What type of vulnerabilities are associated with CVE-2006-0868?
CVE-2006-0868 is associated with multiple unspecified injection vulnerabilities that allow unauthorized access.
Who can potentially exploit CVE-2006-0868?
Remote attackers can potentially exploit CVE-2006-0868 to falsify authentication credentials.