NVD

Id
62681  
Name
CVE-2006-4023  
Description
The ip2long function in PHP 5.1.4 and earlier may incorrectly validate an arbitrary string and return a valid network IP address, which allows remote attackers to obtain network information and facilitate other attacks, as demonstrated using SQL injection in the X-FORWARDED-FOR Header in index.php in MiniBB 2.0. NOTE: it could be argued that the ip2long behavior represents a risk for security-relevant issues in a way that is similar to strcpy"s role in buffer overflows, in which case this would be a class of implementation bugs that would require separate CVE items for each PHP application that uses ip2long in a security-relevant manner.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-08-08  
Modified Date
2008-09-05  
Seq
2006-4023  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
325772 62681 CVE-2006-4023 http://retrogod.altervista.org/php_ip2long.htm  View
325773 62681 CVE-2006-4023 1016609  View
325774 62681 CVE-2006-4023 20060729 PHP ip2long() function circumvention  View
325775 62681 CVE-2006-4023 20060729 Re: PHP ip2long() function circumvention  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59659 JVNDB-2006-001925 PHP の ip2long 関数におけるネットワーク情報を取得される脆弱性 PHP の ip2long 関数は、任意の文字列を間違って検証し有効なネットワーク IP アドレスを返すため、ネットワーク情報を取得される、および他の攻撃を実行される脆弱性が存在します。 CVE-2006-4023 20125 CVE-2006-4023 62681 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001925.html 2006-08-08 2012-09-25 View