NVD

Id
59740  
Name
CVE-2006-1017  
Description
The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the (1) safe_mode or (2) open_basedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imap_open function, allow remote attackers to obtain access to an IMAP stream data structure and conduct unauthorized IMAP actions.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-03-06  
Modified Date
2011-07-14  
Seq
2006-1017  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
307277 59740 CVE-2006-1017 http://bugs.php.net/bug.php?id=37265  View
307278 59740 CVE-2006-1017 516  View
307279 59740 CVE-2006-1017 MDKSA-2006:122  View
307280 59740 CVE-2006-1017 http://www.php.net/ChangeLog-5.php#5.1.5  View
307281 59740 CVE-2006-1017 http://www.php.net/release_5_1_5.php  View
307282 59740 CVE-2006-1017 20060228 (PHP) imap functions bypass safemode and open_basedir restrictions  View
307283 59740 CVE-2006-1017 ADV-2006-0772  View
307284 59740 CVE-2006-1017 php-imap-restriction-bypass(24964)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58306 JVNDB-2006-000502 PHP の imap_open() 関数における safe_mode および open_basedir による制限を回避される脆弱性 ------------ CVE-2006-1017 17119 CVE-2006-1017 59740 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000502.html 2006-08-18 2007-04-01 View