CVE-2006-4458 | Vulnerability Database | Aqua Security

Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) sequence and trailing null (%00) byte in the GLOBALS[phpgw_info][user][preferences][common][country] parameter.

Affected Software

Name	Vendor	Start Version	End Version
Phpgroupware	Phpgroupware	0.9.16.010 (including)	0.9.16.010 (including)
Phpgroupware	Ubuntu	dapper	*
Phpgroupware	Ubuntu	devel	*
Phpgroupware	Ubuntu	edgy	*
Phpgroupware	Ubuntu	feisty	*
Phpgroupware	Ubuntu	gutsy	*
Phpgroupware	Ubuntu	hardy	*
Phpgroupware	Ubuntu	intrepid	*
Phpgroupware	Ubuntu	jaunty	*
Phpgroupware	Ubuntu	karmic	*

References

http://secunia.com/advisories/21687
http://www.securityfocus.com/bid/19751
http://www.vupen.com/english/advisories/2006/3414
https://exchange.xforce.ibmcloud.com/vulnerabilities/28627
https://www.exploit-db.com/exploits/2270
http://secunia.com/advisories/21687
http://www.securityfocus.com/bid/19751
http://www.vupen.com/english/advisories/2006/3414
https://exchange.xforce.ibmcloud.com/vulnerabilities/28627
https://www.exploit-db.com/exploits/2270

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-4458
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html