Lucene search

PRIOn knowledge basePRION:CVE-2006-2660

HistoryJun 13, 2006 - 6:02 p.m.

Buffer overflow

2006-06-1318:02:00

PRIOn knowledge base

www.prio-n.com

129

6.3 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

12.9%

JSON

Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows local users to bypass restrictions and create PHP files with fixed names in other directories via a pathname argument longer than MAXPATHLEN, which prevents a unique string from being appended to the filename.

CPENameOperatorVersion
phpeq4.3.9
phpeq4.2.0
phpeq4.1.0
phpeq4.3.4
phpeq4.0.4
phpeq4.3.0
phpeq4.0.5
phpeq4.3.6
phpeq5.1.4
phpeq4.3.7

Name	Operator	Version
php	eq	4.3.9
php	eq	4.2.0
php	eq	4.1.0
php	eq	4.3.4
php	eq	4.0.4
php	eq	4.3.0
php	eq	4.0.5
php	eq	4.3.6
php	eq	5.1.4
php	eq	4.3.7

Rows per page:

1-10 of 301

References

archives.neohapsis.com/archives/fulldisclosure/2006-06/0209.html

cvs.php.net/viewcvs.cgi/php-src/NEWS?view=markup&rev=1.1247.2.920.2.134

secunia.com/advisories/21125

securityreason.com/securityalert/1069

securitytracker.com/id?1016271

www.mandriva.com/security/advisories?name=MDKSA-2006:122

www.securityfocus.com/archive/1/436785/100/0/threaded

www.ubuntu.com/usn/usn-320-1

exchange.xforce.ibmcloud.com/vulnerabilities/27049

6.3 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

12.9%

JSON

Related for PRION:CVE-2006-2660