NVD

Id
61695  
Name
CVE-2006-3011  
Description
The error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and open_basedir restrictions via a "php://" or other scheme in the third argument, which disables safe mode.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-26  
Modified Date
2011-07-11  
Seq
2006-3011  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
319314 61695 CVE-2006-3011 http://cvs.php.net/viewvc.cgi/php-src/ext/standard/basic_functions.c?diff_format=u&view=log&pathrev=PHP_4_4  View
319315 61695 CVE-2006-3011 http://cvs.php.net/viewvc.cgi/php-src/ext/standard/basic_functions.c?r1=1.543.2.51.2.9&r2=1.543.2.51.2.10&pathrev=PHP_4_4&diff_format=u  View
319316 61695 CVE-2006-3011 20060625 error_log() Safe Mode Bypass PHP 5.1.4 and 4.4.2  View
319317 61695 CVE-2006-3011 1129  View
319318 61695 CVE-2006-3011 1016377  View
319319 61695 CVE-2006-3011 MDKSA-2006:122  View
319320 61695 CVE-2006-3011 http://www.php.net/release_5_1_5.php  View
319321 61695 CVE-2006-3011 18645  View
319322 61695 CVE-2006-3011 USN-320-1  View
319323 61695 CVE-2006-3011 ADV-2006-2523  View
319324 61695 CVE-2006-3011 php-errorlog-safe-mode-bypass(27414)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58369 JVNDB-2006-000565 GNU Texinfo の texindex コマンドにおけるシンボリックリンク攻撃を受ける脆弱性 GNU Texinfo の texindex コマンドには、セキュリティ上不適切な方法で一時ファイルを作成してしまいシンボリックリンク攻撃を受ける脆弱性が存在します。 CVE-2006-3011 19113 CVE-2006-3011 61695 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000565.html 2006-09-15 2007-04-01 View