Lucene search

[email protected]CVE-2006-2660

HistoryJun 13, 2006 - 6:02 p.m.

CVE-2006-2660

2006-06-1318:02:00

[email protected]

web.nvd.nist.gov

1051

cve-2006-2660

php

vulnerability

buffer consumption

local user

bypass restrictions

fixed names

nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

Confidence

Low

EPSS

Percentile

15.7%

JSON

Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows local users to bypass restrictions and create PHP files with fixed names in other directories via a pathname argument longer than MAXPATHLEN, which prevents a unique string from being appended to the filename.

Affected configurations

NVD

Node

phpphpMatch4.0.0

phpphpMatch4.0.1

phpphpMatch4.0.2

phpphpMatch4.0.3

phpphpMatch4.0.4

phpphpMatch4.0.5

phpphpMatch4.1.0

phpphpMatch4.1.1

phpphpMatch4.1.2

phpphpMatch4.2.0

phpphpMatch4.2.1

phpphpMatch4.2.2

phpphpMatch4.2.3

phpphpMatch4.3.0

phpphpMatch4.3.1

phpphpMatch4.3.2

phpphpMatch4.3.3

phpphpMatch4.3.4

phpphpMatch4.3.5

phpphpMatch4.3.6

phpphpMatch4.3.7

phpphpMatch4.3.8

phpphpMatch4.3.9

phpphpMatch4.3.10

phpphpMatch4.3.11

phpphpMatch4.4.0

phpphpMatch4.4.1

phpphpMatch4.4.2

phpphpMatch4.4.3

phpphpMatch5.1.4

VendorProductVersionCPE
phpphp4.3.8cpe:/a:php:php:4.3.8:::
phpphp4.4.0cpe:/a:php:php:4.4.0:::
phpphp4.3.10cpe:/a:php:php:4.3.10:::
phpphp4.2.2cpe:/a:php:php:4.2.2:::
phpphp4.0.0cpe:/a:php:php:4.0.0:::
phpphp4.1.0cpe:/a:php:php:4.1.0:::
phpphp4.1.2cpe:/a:php:php:4.1.2:::
phpphp4.4.1cpe:/a:php:php:4.4.1:::
phpphp4.3.0cpe:/a:php:php:4.3.0:::
phpphp4.4.3cpe:/a:php:php:4.4.3:::

Vendor	Product	Version	CPE
php	php	4.3.8	cpe:/a:php:php:4.3.8:::
php	php	4.4.0	cpe:/a:php:php:4.4.0:::
php	php	4.3.10	cpe:/a:php:php:4.3.10:::
php	php	4.2.2	cpe:/a:php:php:4.2.2:::
php	php	4.0.0	cpe:/a:php:php:4.0.0:::
php	php	4.1.0	cpe:/a:php:php:4.1.0:::
php	php	4.1.2	cpe:/a:php:php:4.1.2:::
php	php	4.4.1	cpe:/a:php:php:4.4.1:::
php	php	4.3.0	cpe:/a:php:php:4.3.0:::
php	php	4.4.3	cpe:/a:php:php:4.4.3:::