Lucene search
HistoryJan 09, 2006 - 11:03 p.m.
CVE-2006-0144
cve-2006-0144
php
pear
remote code execution
proxy server
apache2triad
7.6 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.036 Low
EPSS
Percentile
91.7%
The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code by redirecting go-pear.php to a malicious proxy server that provides a modified version of Tar.php with a malicious extractModify function.
Affected configurations
Node
apache2triadapache2triad
ORphppearMatch0.2.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache2triad:apache2triad | apache2triad | eq | * |
| php:pear | php pear | eq | 0.2.2 |
Related
cvelist
cvelist
CVE-2006-0144
2006-01-09 23:00:00
prion
prion
Code injection
2006-01-09 23:03:00
ubuntucve
ubuntucve
CVE-2006-0144
2006-01-09 00:00:00
nvd
nvd
CVE-2006-0144
2006-01-09 23:03:00
7.6 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.036 Low
EPSS
Percentile
91.7%
Related for CVE-2006-0144