First published: Sat Nov 04 2006(Updated: )
Unspecified vulnerabilities in PHP, probably before 5.2.0, allow local users to bypass open_basedir restrictions and perform unspecified actions via unspecified vectors involving the (1) chdir and (2) tempnam functions. NOTE: the tempnam vector might overlap CVE-2006-1494.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
PHP | =5.1.5 | |
PHP | =5.1.2 | |
PHP | =5.1.1 | |
PHP | =5.0-rc1 | |
PHP | =5.0.5 | |
PHP | =5.0.1 | |
PHP | =5.1.4 | |
PHP | =5.0.4 | |
PHP | <=5.1.6 | |
PHP | =5.0-rc3 | |
PHP | =5.0.3 | |
PHP | =5.1.0 | |
PHP | =5.0-rc2 | |
PHP | =5.1.3 | |
PHP | =5.0.2 | |
PHP | =5.0.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2006-5706 is considered moderate as it allows local users to bypass open_basedir restrictions.
To fix CVE-2006-5706, upgrade to PHP version 5.2.0 or newer.
Affected PHP versions for CVE-2006-5706 include versions less than 5.2.0, particularly versions 5.0.0 through 5.1.6.
Attackers may exploit CVE-2006-5706 to perform unauthorized file access or manipulation via the chdir and tempnam functions.
CVE-2006-5706 is a local vulnerability that allows local users to exploit the affected systems.