CVE-2006-5706: High severity PHP PHP vulnerability

Q: What is the severity of CVE-2006-5706?

The severity of CVE-2006-5706 is considered moderate as it allows local users to bypass open_basedir restrictions.

Q: How do I fix CVE-2006-5706?

To fix CVE-2006-5706, upgrade to PHP version 5.2.0 or newer.

Q: What are the affected PHP versions for CVE-2006-5706?

Affected PHP versions for CVE-2006-5706 include versions less than 5.2.0, particularly versions 5.0.0 through 5.1.6.

Q: What actions can attackers perform due to CVE-2006-5706?

Attackers may exploit CVE-2006-5706 to perform unauthorized file access or manipulation via the chdir and tempnam functions.

Q: Is CVE-2006-5706 a local or remote vulnerability?

CVE-2006-5706 is a local vulnerability that allows local users to exploit the affected systems.

Published Nov 4, 2006

Updated

Unspecified vulnerabilities in PHP, probably before 5.2.0, allow local users to bypass openbasedir restrictions and perform unspecified actions via unspecified vectors involving the (1) chdir and (2) tempnam functions. NOTE: the tempnam vector might overlap CVE-2006-1494.

Affected Software

16 affected components

PHP PHP=5.1.5

PHP PHP=5.1.2

PHP PHP=5.1.1

PHP PHP=5.0-rc1

PHP PHP=5.0.5

PHP PHP=5.0.1

PHP PHP=5.1.4

PHP PHP=5.0.4

PHP PHP<=5.1.6

PHP PHP=5.0-rc3

PHP PHP=5.0.3

PHP PHP=5.1.0

PHP PHP=5.0-rc2

PHP PHP=5.1.3

PHP PHP=5.0.2

PHP PHP=5.0.0

Event History

Nov 4, 2006

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Data Sourced

via NVD·01:07 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2006-5706?

The severity of CVE-2006-5706 is considered moderate as it allows local users to bypass open_basedir restrictions.

How do I fix CVE-2006-5706?

To fix CVE-2006-5706, upgrade to PHP version 5.2.0 or newer.

What are the affected PHP versions for CVE-2006-5706?