CVE-2006-1494: Low severity php php vulnerability
Published Apr 10, 2006
·Updated
Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass openbasedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function.
Affected Software
65 affected components
PHP PHP=4.3.9
PHP PHP=4.0-beta1
PHP PHP=5.1.2
PHP PHP=4.0-beta4
PHP PHP=4.2.0
PHP PHP=5.1.1
PHP PHP=5.0.0-beta1
PHP PHP=4.1.0
PHP PHP=4.3.4
PHP PHP=4.0.4
PHP PHP=4.3.0
PHP PHP=4.0.5
PHP PHP=5.0-rc1
PHP PHP=5.0.5
PHP PHP=4.3.6
PHP PHP=5.0.1
PHP PHP=4.0.7-rc2
PHP PHP=4.3.7
PHP PHP=5.0.4
PHP PHP=4.0.7-rc1
PHP PHP=4.2.2
PHP PHP=4.4.2
PHP PHP=4.0-rc1
PHP PHP=4.3.2
PHP PHP=4.3.11
PHP PHP=4.0.0
PHP PHP=4.0.3-patch1
PHP PHP=4.0.7
PHP PHP=4.0.2
PHP PHP=4.3.3
PHP PHP=5.0-rc3
PHP PHP=4.1.1
PHP PHP=5.0.0-rc2
PHP PHP=5.0.3
PHP PHP=4.2.3
PHP PHP=5.1.0
PHP PHP=4.0.1-patch1
PHP PHP=5.0.0-rc3
PHP PHP=4.0
PHP PHP=4.0-beta2
PHP PHP=4.0.1-patch2
PHP PHP=4.0.6
PHP PHP=5.0-rc2
PHP PHP=4.1.2
PHP PHP=5.0.0-beta3
PHP PHP=4.0.7-rc3
PHP PHP=4.0-rc2
PHP PHP=4.3.1
PHP PHP=4.0-beta_4_patch1
PHP PHP=4.4.0
PHP PHP=4.3.10
PHP PHP=4.2.1
PHP PHP=5.0.0-rc1
PHP PHP=4.0.4-patch1
PHP PHP=4.0.1
PHP PHP=5.0.2
PHP PHP=4.2
PHP PHP=4.4.1
PHP PHP=4.0-beta3
PHP PHP=4.0.3
PHP PHP=5.0.0-beta4
PHP PHP=5.0.0
PHP PHP=4.3.8
PHP PHP=4.3.5
PHP PHP=5.0.0-beta2
Remediation
Patch Available
Patch Available
Event History
Apr 10, 2006
CVE Published
07:02 PM
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-1494?
CVE-2006-1494 is considered a moderate severity vulnerability due to its potential for local and remote exploitation.
2
How do I fix CVE-2006-1494?
To fix CVE-2006-1494, upgrade to a patched version of PHP that is not affected by this vulnerability.
3
What systems are affected by CVE-2006-1494?
CVE-2006-1494 affects PHP versions 4.4.2, 5.1.2, and several earlier versions.
4
What type of vulnerability is CVE-2006-1494?
CVE-2006-1494 is a directory traversal vulnerability allowing bypass of open_basedir restrictions.
5
Can CVE-2006-1494 be exploited remotely?
Yes, CVE-2006-1494 can be exploited remotely by attackers to create files in arbitrary directories.