NVD

Id
59737  
Name
CVE-2006-1014  
Description
Argument injection vulnerability in certain PHP 4.x and 5.x applications, when used with sendmail and when accepting remote input for the additional_parameters argument to the mb_send_mail function, allows context-dependent attackers to read and create arbitrary files by providing extra -C and -X arguments to sendmail. NOTE: it could be argued that this is a class of technology-specific vulnerability, instead of a particular instance; if so, then this should not be included in CVE.  
Reject
 
CVSS Version
2  
CVSS Score
3.2  
Severity
Low  
CVSS Base Score
3.2  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-03-06  
Modified Date
2011-03-07  
Seq
2006-1014  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
307265 59737 CVE-2006-1014 SUSE-SA:2006:024  View
307266 59737 CVE-2006-1014 20060228 (PHP) mb_send_mail security bypass  View
307267 59737 CVE-2006-1014 16878  View
307268 59737 CVE-2006-1014 ADV-2006-0772  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61472 JVNDB-2006-003738 特定の PHP のアプリケーションにおける任意のファイルを読まれる脆弱性 特定の PHP のアプリケーションには、引数の挿入により、任意のファイルを読まれるおよび作成される脆弱性が存在します。 CVE-2006-1014 17116 CVE-2006-1014 59737 3.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003738.html 2006-03-07 2013-12-26 View