CVE-2006-7204: Low severity PHP PHP vulnerability
Published May 22, 2007
·Updated
The imapbody function in PHP before 4.4.4 does not implement safemode or openbasedir checks, which allows local users to read arbitrary files or list arbitrary directory contents.
Affected Software
2 affected components
PHP PHP>=5.1.0<5.1.5
PHP PHP>=4.4.0<4.4.4
Remediation
Patch Available
Patch Available
Event History
May 22, 2007
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-7204?
CVE-2006-7204 is classified as a medium severity vulnerability due to potential local file disclosure risks.
2
How does CVE-2006-7204 affect PHP applications?
CVE-2006-7204 allows local users to read arbitrary files or list directory contents due to insufficient checks in the imap_body function.
3
How can I fix CVE-2006-7204?
To fix CVE-2006-7204, upgrade PHP to version 4.4.4 or later, or ensure safemode and open_basedir settings are correctly configured.
4
Which versions of PHP are affected by CVE-2006-7204?
CVE-2006-7204 affects PHP versions from 4.4.0 to 4.4.4 and from 5.1.0 to 5.1.5.
5
Is CVE-2006-7204 a remote or local vulnerability?
CVE-2006-7204 is a local vulnerability that requires local user access to exploit.