CVE-2006-5178: Race Condition

Q: What is the vulnerability description of CVE-2006-5178?

CVE-2006-5178 describes a race condition in the symlink function in PHP versions up to 5.1.6 that allows local users to bypass the open_basedir restriction.

Q: What PHP versions are affected by CVE-2006-5178?

CVE-2006-5178 affects PHP versions 4.0 to 5.1.6, including various subversions and release candidates.

Q: How can I mitigate CVE-2006-5178?

To mitigate CVE-2006-5178, it is recommended to upgrade to PHP version 5.1.7 or later, which addresses this vulnerability.

Q: What are the risks associated with CVE-2006-5178?

The risk associated with CVE-2006-5178 is that a local user could bypass security restrictions, potentially gaining unauthorized access to files.

Q: Is CVE-2006-5178 a critical vulnerability?

CVE-2006-5178 is considered a serious vulnerability as it can be exploited by local users to compromise system security.

Published Oct 6, 2006

Updated

Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the openbasedir restriction by using a combination of symlink, mkdir, and unlink functions to change the file path after the openbasedir check and before the file is opened by the underlying system, as demonstrated by symlinking a symlink into a subdirectory, to point to a parent directory via .. (dot dot) sequences, and then unlinking the resulting symlink.

Affected Software

54 affected components

PHP PHP=4.3.9

PHP PHP=5.1.5

PHP PHP=5.1.2

PHP PHP=4.2.0

PHP PHP=5.1.1

PHP PHP=4.4.4

PHP PHP=4.1.0

PHP PHP=4.3.4

PHP PHP=4.0.4

PHP PHP=4.3.0

PHP PHP=4.0.5

PHP PHP=5.0-rc1

PHP PHP=5.0.5

PHP PHP=4.3.6

PHP PHP=5.0.1

PHP PHP=5.1.4

PHP PHP=4.0.7-rc2

PHP PHP=4.3.7

PHP PHP=5.0.4

PHP PHP=4.0.7-rc1

PHP PHP=4.2.2

PHP PHP=4.4.2

PHP PHP=4.3.2

PHP PHP=4.3.11

PHP PHP<=5.1.6

PHP PHP=4.0.3-patch1

PHP PHP=4.0.7

PHP PHP=4.0.2

PHP PHP=4.3.3

PHP PHP=5.0-rc3

PHP PHP=4.1.1

PHP PHP=4.4.3

PHP PHP=5.0.3

PHP PHP=4.2.3

PHP PHP=5.1.0

PHP PHP=4.0.1-patch1

PHP PHP=4.0

PHP PHP=4.0.1-patch2

PHP PHP=4.0.6

PHP PHP=5.0-rc2

PHP PHP=4.1.2

PHP PHP=4.0.7-rc3

PHP PHP=4.3.1

PHP PHP=5.1.3

PHP PHP=4.4.0

PHP PHP=4.3.10

PHP PHP=4.2.1

PHP PHP=4.0.1

PHP PHP=5.0.2

PHP PHP=4.2

PHP PHP=4.4.1

PHP PHP=5.0.0

PHP PHP=4.3.8

PHP PHP=4.3.5

Event History

Oct 6, 2006

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Oct 10, 2006

Data Sourced

via NVD·04:06 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability description of CVE-2006-5178?

CVE-2006-5178 describes a race condition in the symlink function in PHP versions up to 5.1.6 that allows local users to bypass the open_basedir restriction.

What PHP versions are affected by CVE-2006-5178?

CVE-2006-5178 affects PHP versions 4.0 to 5.1.6, including various subversions and release candidates.

How can I mitigate CVE-2006-5178?