What is the severity of CVE-2006-7204?

CVE-2006-7204 is classified as a medium severity vulnerability due to potential local file disclosure risks.

How does CVE-2006-7204 affect PHP applications?

CVE-2006-7204 allows local users to read arbitrary files or list directory contents due to insufficient checks in the imap_body function.

How can I fix CVE-2006-7204?

To fix CVE-2006-7204, upgrade PHP to version 4.4.4 or later, or ensure safemode and open_basedir settings are correctly configured.

Which versions of PHP are affected by CVE-2006-7204?

CVE-2006-7204 affects PHP versions from 4.4.0 to 4.4.4 and from 5.1.0 to 5.1.5.

Is CVE-2006-7204 a remote or local vulnerability?

CVE-2006-7204 is a local vulnerability that requires local user access to exploit.

Vulnerability/
CVE-2006-7204

low

2.1

CWE

NVD-CWE-Other

22/5/2007

19/1/2023

CVE-2006-7204

First published: Tue May 22 2007(Updated: )

The imap_body function in PHP before 4.4.4 does not implement safemode or open_basedir checks, which allows local users to read arbitrary files or list arbitrary directory contents.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
PHP	>=5.1.0<5.1.5
PHP	>=4.4.0<4.4.4

Remedy

http://secunia.com/advisories/21546

Remedy

http://www.osvdb.org/28005

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2006-7204?
CVE-2006-7204 is classified as a medium severity vulnerability due to potential local file disclosure risks.
How does CVE-2006-7204 affect PHP applications?
CVE-2006-7204 allows local users to read arbitrary files or list directory contents due to insufficient checks in the imap_body function.
How can I fix CVE-2006-7204?
To fix CVE-2006-7204, upgrade PHP to version 4.4.4 or later, or ensure safemode and open_basedir settings are correctly configured.
Which versions of PHP are affected by CVE-2006-7204?
CVE-2006-7204 affects PHP versions from 4.4.0 to 4.4.4 and from 5.1.0 to 5.1.5.
Is CVE-2006-7204 a remote or local vulnerability?
CVE-2006-7204 is a local vulnerability that requires local user access to exploit.

agent/weakness
agent/author
agent/severity
agent/type
agent/event
agent/references
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
agent/remedy
agent/tags
collector/nvd-historical
agent/software-canonical-lookup-request
collector/nvd-index
agent/description
vendor/php
canonical/php
version/php/5.1.0
version/php/4.4.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2006-7204?
CVE-2006-7204 is classified as a medium severity vulnerability due to potential local file disclosure risks.
How does CVE-2006-7204 affect PHP applications?
CVE-2006-7204 allows local users to read arbitrary files or list directory contents due to insufficient checks in the imap_body function.
How can I fix CVE-2006-7204?
To fix CVE-2006-7204, upgrade PHP to version 4.4.4 or later, or ensure safemode and open_basedir settings are correctly configured.
Which versions of PHP are affected by CVE-2006-7204?
CVE-2006-7204 affects PHP versions from 4.4.0 to 4.4.4 and from 5.1.0 to 5.1.5.
Is CVE-2006-7204 a remote or local vulnerability?
CVE-2006-7204 is a local vulnerability that requires local user access to exploit.