CVE-2006-2660
First published: Tue Jun 13 2006(Updated: )
Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows local users to bypass restrictions and create PHP files with fixed names in other directories via a pathname argument longer than MAXPATHLEN, which prevents a unique string from being appended to the filename.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PHP PHP | =4.0.0 | |
| PHP PHP | =4.0.1 | |
| PHP PHP | =4.0.2 | |
| PHP PHP | =4.0.3 | |
| PHP PHP | =4.0.4 | |
| PHP PHP | =4.0.5 | |
| PHP PHP | =4.1.0 | |
| PHP PHP | =4.1.1 | |
| PHP PHP | =4.1.2 | |
| PHP PHP | =4.2.0 | |
| PHP PHP | =4.2.1 | |
| PHP PHP | =4.2.2 | |
| PHP PHP | =4.2.3 | |
| PHP PHP | =4.3.0 | |
| PHP PHP | =4.3.1 | |
| PHP PHP | =4.3.2 | |
| PHP PHP | =4.3.3 | |
| PHP PHP | =4.3.4 | |
| PHP PHP | =4.3.5 | |
| PHP PHP | =4.3.6 | |
| PHP PHP | =4.3.7 | |
| PHP PHP | =4.3.8 | |
| PHP PHP | =4.3.9 | |
| PHP PHP | =4.3.10 | |
| PHP PHP | =4.3.11 | |
| PHP PHP | =4.4.0 | |
| PHP PHP | =4.4.1 | |
| PHP PHP | =4.4.2 | |
| PHP PHP | =4.4.3 | |
| PHP PHP | =5.1.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0209.html
- http://cvs.php.net/viewcvs.cgi/php-src/NEWS?view=markup&rev=1.1247.2.920.2.134
- http://secunia.com/advisories/21125
- http://securityreason.com/securityalert/1069
- http://securitytracker.com/id?1016271
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:122
- http://www.securityfocus.com/archive/1/436785/100/0/threaded
- http://www.ubuntu.com/usn/usn-320-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27049
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-historical
- vendor/php
- product/php
- canonical/php php
- collector/nvd-index
- version/php php/4.3.9
- version/php php/4.2.0
- version/php php/4.1.0
- version/php php/4.3.4
- version/php php/4.0.4
- version/php php/4.3.0
- version/php php/4.0.5
- version/php php/4.3.6
- version/php php/5.1.4
- version/php php/4.3.7
- version/php php/4.2.2
- version/php php/4.4.2
- version/php php/4.3.2
- version/php php/4.3.11
- version/php php/4.0.0
- version/php php/4.0.2
- version/php php/4.3.3
- version/php php/4.1.1
- version/php php/4.4.3
- version/php php/4.2.3
- version/php php/4.1.2
- version/php php/4.3.1
- version/php php/4.4.0
- version/php php/4.3.10
- version/php php/4.2.1
- version/php php/4.0.1
- version/php php/4.4.1
- version/php php/4.0.3
- version/php php/4.3.8
- version/php php/4.3.5