NVD

Id
61701  
Name
CVE-2006-3017  
Description
zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable"s value to be used in security-relevant operations.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-06-14  
Modified Date
2010-09-15  
Seq
2006-3017  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
319375 61701 CVE-2006-3017 20060701-01-U  View
319376 61701 CVE-2006-3017 20060806 PHP: Zend_Hash_Del_Key_Or_Index Vulnerability  View
319377 61701 CVE-2006-3017 http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&r1=1.87.4.8.2.1&r2=1.87.4.8.2.2  View
319378 61701 CVE-2006-3017 http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&view=log  View
319379 61701 CVE-2006-3017 oval:org.mitre.oval:def:10118  View
319380 61701 CVE-2006-3017 RHSA-2006:0549  View
319381 61701 CVE-2006-3017 1016306  View
319382 61701 CVE-2006-3017 1016649  View
319383 61701 CVE-2006-3017 http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm  View
319384 61701 CVE-2006-3017 DSA-1206  View
319385 61701 CVE-2006-3017 http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_vulnerability.html  View
319386 61701 CVE-2006-3017 MDKSA-2006:122  View
319387 61701 CVE-2006-3017 SUSE-SA:2006:031  View
319388 61701 CVE-2006-3017 SUSE-SA:2006:034  View
319389 61701 CVE-2006-3017 http://www.php.net/release_5_1_3.php  View
319390 61701 CVE-2006-3017 RHSA-2006:0567  View
319391 61701 CVE-2006-3017 RHSA-2006:0568  View
319392 61701 CVE-2006-3017 20060806 PHP: Zend_Hash_Del_Key_Or_Index Vulnerability  View
319393 61701 CVE-2006-3017 20061005 rPSA-2006-0182-1 php php-mysql php-pgsql  View
319394 61701 CVE-2006-3017 17843  View
319395 61701 CVE-2006-3017 TLSA-2006-38  View
319396 61701 CVE-2006-3017 USN-320-1  View
319397 61701 CVE-2006-3017 php-zendhashdel-unspecified(27396)  View
319398 61701 CVE-2006-3017 https://issues.rpath.com/browse/RPL-683  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58066 JVNDB-2006-000262 PHP の zend_hash_del() 関数における認証を回避される脆弱性 PHP には、zend_hash.c の zend_hash_del() 関数に不備があるため、unset() 関数による変数の破棄が適切に行われない脆弱性が存在します。 CVE-2006-3017 19119 CVE-2006-3017 61701 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000262.html 2006-05-04 2007-04-01 View