CVE-2006-0869: Medium severity PEAR Pear Liveuser vulnerability
Directory traversal vulnerability in the "remember me" feature in liveuser.php in PHP Extension and Application Repository (PEAR) LiveUser 0.16.8 and earlier allows remote attackers to determine file existence, and possibly delete arbitrary files with short pathnames or possibly read arbitrary files, via a .. (dot dot) in the storeid value of a cookie.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0869?
CVE-2006-0869 is considered a moderate severity vulnerability due to its potential for directory traversal exploits.
How do I fix CVE-2006-0869?
To fix CVE-2006-0869, upgrade to a later version of the PEAR LiveUser package that is not affected by this vulnerability.
What versions of PEAR LiveUser are affected by CVE-2006-0869?
CVE-2006-0869 affects PEAR LiveUser versions 0.16.8 and earlier.
What impact does CVE-2006-0869 have on affected systems?
CVE-2006-0869 allows remote attackers to determine file existence and may enable file deletion or arbitrary file reading.
Can exploiting CVE-2006-0869 lead to compromised systems?
Yes, exploiting CVE-2006-0869 can lead to unauthorized access and manipulation of files on the server.