NVD

Id
62678  
Name
CVE-2006-4020  
Description
scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-08  
Modified Date
2011-03-07  
Seq
2006-4020  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
325737 62678 CVE-2006-4020 20061001-01-P  View
325738 62678 CVE-2006-4020 http://bugs.php.net/bug.php?id=38322  View
325739 62678 CVE-2006-4020 oval:org.mitre.oval:def:11062  View
325740 62678 CVE-2006-4020 RHSA-2006:0688  View
325741 62678 CVE-2006-4020 RHSA-2006:0736  View
325742 62678 CVE-2006-4020 GLSA-200608-28  View
325743 62678 CVE-2006-4020 1341  View
325744 62678 CVE-2006-4020 1016984  View
325745 62678 CVE-2006-4020 http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm  View
325746 62678 CVE-2006-4020 http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm  View
325747 62678 CVE-2006-4020 http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm  View
325748 62678 CVE-2006-4020 MDKSA-2006:144  View
325749 62678 CVE-2006-4020 SUSE-SR:2006:019  View
325750 62678 CVE-2006-4020 SUSE-SR:2006:020  View
325751 62678 CVE-2006-4020 SUSE-SR:2006:022  View
325752 62678 CVE-2006-4020 SUSE-SA:2006:052  View
325753 62678 CVE-2006-4020 http://www.php.net/ChangeLog-5.php#5.1.5  View
325754 62678 CVE-2006-4020 http://www.php.net/release_5_1_5.php  View
325755 62678 CVE-2006-4020 http://www.plain-text.info/sscanf_bug.txt  View
325756 62678 CVE-2006-4020 RHSA-2006:0669  View
325757 62678 CVE-2006-4020 RHSA-2006:0682  View
325758 62678 CVE-2006-4020 20060804 php local buffer underflow could lead to arbitary code execution  View
325759 62678 CVE-2006-4020 19415  View
325760 62678 CVE-2006-4020 USN-342-1  View
325761 62678 CVE-2006-4020 ADV-2006-3193  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58275 JVNDB-2006-000471 PHP の sscanf() 関数における任意のコードを実行される脆弱性 PHP には ext/standard/scanf.c の不備により、 sscanf() 関数のオプションパラメータとして引き渡された変数が unset() 関数により破棄された場合に、開放されたメモリ領域を参照してしまう脆弱性が存在します。 CVE-2006-4020 20122 CVE-2006-4020 62678 4.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000471.html 2006-08-04 2007-04-01 View