CVE-2006-3011

CVE-2006-3011

Medium · published June 27, 2006

CVSS v2.0
4.6
EPSS
1%
Percentile
71.1
In the wild
Unconfirmed
What it is

The error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and open_basedir restrictions via a "php://" or other scheme in the third argument, which disables safe mode.

The record
Technical detail
CVSS v2.0
4.6 · MEDIUM
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:P
CVSS v4.0
Not supplied
EPSS
0.01342 · 71.1th percentile
Published
2006-06-27T01:05Z
Affected products (77)
ProductVersionsFixed in
php/php≤ 4.4.3—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
php/phpall versions—
References (32)
http://cvs.php.net/viewvc.cgi/php-src/ext/standard/basic_functions.c?diff_format=u&view=log&pathrev=PHP_4_4 · [email protected]http://cvs.php.net/viewvc.cgi/php-src/ext/standard/basic_functions.c?r1=1.543.2.51.2.9&r2=1.543.2.51.2.10&pathrev=PHP_4_4&diff_format=u · [email protected]http://secunia.com/advisories/20818 · [email protected]http://secunia.com/advisories/21050 · [email protected]http://secunia.com/advisories/21125 · [email protected]http://secunia.com/advisories/21546 · [email protected]http://securityreason.com/achievement_securityalert/41 · [email protected]http://securityreason.com/securityalert/1129 · [email protected]http://securitytracker.com/id?1016377 · [email protected]http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 · [email protected]http://www.osvdb.org/26827 · [email protected]http://www.php.net/release_5_1_5.php · [email protected]http://www.securityfocus.com/bid/18645 · [email protected]http://www.ubuntu.com/usn/usn-320-1 · [email protected]http://www.vupen.com/english/advisories/2006/2523 · [email protected]https://exchange.xforce.ibmcloud.com/vulnerabilities/27414 · [email protected]http://cvs.php.net/viewvc.cgi/php-src/ext/standard/basic_functions.c?diff_format=u&view=log&pathrev=PHP_4_4 · af854a3a-2127-422b-91ae-364da2661108http://cvs.php.net/viewvc.cgi/php-src/ext/standard/basic_functions.c?r1=1.543.2.51.2.9&r2=1.543.2.51.2.10&pathrev=PHP_4_4&diff_format=u · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/20818 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21050 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21125 · af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21546 · af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/achievement_securityalert/41 · af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/1129 · af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1016377 · af854a3a-2127-422b-91ae-364da2661108http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 · af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/26827 · af854a3a-2127-422b-91ae-364da2661108http://www.php.net/release_5_1_5.php · af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/18645 · af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/usn-320-1 · af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/2523 · af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/27414 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 26 JUN 21:00Z
    The error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and open_basedir restrictions via a…
    cvelistv5