CVE Vulnerabilities

CVE-2006-1494

Published: Apr 10, 2006 | Modified: Oct 30, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.6 LOW
AV:N/AC:H/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED

Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function.

Affected Software

Name Vendor Start Version End Version
Php Php 4.0 (including) 4.0 (including)
Php Php 4.0-beta_4_patch1 (including) 4.0-beta_4_patch1 (including)
Php Php 4.0-beta1 (including) 4.0-beta1 (including)
Php Php 4.0-beta2 (including) 4.0-beta2 (including)
Php Php 4.0-beta3 (including) 4.0-beta3 (including)
Php Php 4.0-beta4 (including) 4.0-beta4 (including)
Php Php 4.0-rc1 (including) 4.0-rc1 (including)
Php Php 4.0-rc2 (including) 4.0-rc2 (including)
Php Php 4.0.0 (including) 4.0.0 (including)
Php Php 4.0.1 (including) 4.0.1 (including)
Php Php 4.0.1-patch1 (including) 4.0.1-patch1 (including)
Php Php 4.0.1-patch2 (including) 4.0.1-patch2 (including)
Php Php 4.0.2 (including) 4.0.2 (including)
Php Php 4.0.3 (including) 4.0.3 (including)
Php Php 4.0.3-patch1 (including) 4.0.3-patch1 (including)
Php Php 4.0.4 (including) 4.0.4 (including)
Php Php 4.0.4-patch1 (including) 4.0.4-patch1 (including)
Php Php 4.0.5 (including) 4.0.5 (including)
Php Php 4.0.6 (including) 4.0.6 (including)
Php Php 4.0.7 (including) 4.0.7 (including)
Php Php 4.0.7-rc1 (including) 4.0.7-rc1 (including)
Php Php 4.0.7-rc2 (including) 4.0.7-rc2 (including)
Php Php 4.0.7-rc3 (including) 4.0.7-rc3 (including)
Php Php 4.1.0 (including) 4.1.0 (including)
Php Php 4.1.1 (including) 4.1.1 (including)
Php Php 4.1.2 (including) 4.1.2 (including)
Php Php 4.2 (including) 4.2 (including)
Php Php 4.2.0 (including) 4.2.0 (including)
Php Php 4.2.1 (including) 4.2.1 (including)
Php Php 4.2.2 (including) 4.2.2 (including)
Php Php 4.2.3 (including) 4.2.3 (including)
Php Php 4.3.0 (including) 4.3.0 (including)
Php Php 4.3.1 (including) 4.3.1 (including)
Php Php 4.3.2 (including) 4.3.2 (including)
Php Php 4.3.3 (including) 4.3.3 (including)
Php Php 4.3.4 (including) 4.3.4 (including)
Php Php 4.3.5 (including) 4.3.5 (including)
Php Php 4.3.6 (including) 4.3.6 (including)
Php Php 4.3.7 (including) 4.3.7 (including)
Php Php 4.3.8 (including) 4.3.8 (including)
Php Php 4.3.9 (including) 4.3.9 (including)
Php Php 4.3.10 (including) 4.3.10 (including)
Php Php 4.3.11 (including) 4.3.11 (including)
Php Php 4.4.0 (including) 4.4.0 (including)
Php Php 4.4.1 (including) 4.4.1 (including)
Php Php 4.4.2 (including) 4.4.2 (including)
Php Php 5.0-rc1 (including) 5.0-rc1 (including)
Php Php 5.0-rc2 (including) 5.0-rc2 (including)
Php Php 5.0-rc3 (including) 5.0-rc3 (including)
Php Php 5.0.0 (including) 5.0.0 (including)
Php Php 5.0.0-beta1 (including) 5.0.0-beta1 (including)
Php Php 5.0.0-beta2 (including) 5.0.0-beta2 (including)
Php Php 5.0.0-beta3 (including) 5.0.0-beta3 (including)
Php Php 5.0.0-beta4 (including) 5.0.0-beta4 (including)
Php Php 5.0.0-rc1 (including) 5.0.0-rc1 (including)
Php Php 5.0.0-rc2 (including) 5.0.0-rc2 (including)
Php Php 5.0.0-rc3 (including) 5.0.0-rc3 (including)
Php Php 5.0.1 (including) 5.0.1 (including)
Php Php 5.0.2 (including) 5.0.2 (including)
Php Php 5.0.3 (including) 5.0.3 (including)
Php Php 5.0.4 (including) 5.0.4 (including)
Php Php 5.0.5 (including) 5.0.5 (including)
Php Php 5.1.0 (including) 5.1.0 (including)
Php Php 5.1.1 (including) 5.1.1 (including)
Php Php 5.1.2 (including) 5.1.2 (including)
Red Hat Enterprise Linux 3 RedHat php-0:4.3.2-33.ent *
Red Hat Enterprise Linux 4 RedHat php-0:4.3.9-3.15 *
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 RedHat *
Red Hat Enterprise Linux ES version 2.1 RedHat *
Red Hat Enterprise Linux WS version 2.1 RedHat *
Red Hat Linux Advanced Workstation 2.1 RedHat *
Stronghold 4.0 for Red Hat Enterprise Linux AS (version 2.1) RedHat *
Php5 Ubuntu dapper *
Php5 Ubuntu devel *
Php5 Ubuntu edgy *
Php5 Ubuntu feisty *

References