NVD

Id
63258  
Name
CVE-2006-4625  
Description
PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safe_mode and open_basedir, via the ini_restore function, which resets the values to their php.ini (Master Value) defaults.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-09-12  
Modified Date
2011-03-07  
Seq
2006-4625  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
329614 63258 CVE-2006-4625 HPSBMA02215  View
329615 63258 CVE-2006-4625 HPSBTU02232  View
329616 63258 CVE-2006-4625 SUSE-SA:2006:059  View
329617 63258 CVE-2006-4625 20060909 PHP 5.1.6 / 4.4.4 Critical php_admin* bypass by ini_restore()  View
329618 63258 CVE-2006-4625 1519  View
329619 63258 CVE-2006-4625 MDKSA-2006:185  View
329620 63258 CVE-2006-4625 20060909 Re: PHP 5.1.6 / 4.4.4 Critical php_admin* bypass by ini_restore()  View
329621 63258 CVE-2006-4625 20060913 Re: PHP 5.1.6 / 4.4.4 Critical php_admin* bypass by ini_restore()  View
329622 63258 CVE-2006-4625 OpenPKG-SA-2006.023  View
329623 63258 CVE-2006-4625 19933  View
329624 63258 CVE-2006-4625 TLSA-2006-38  View
329625 63258 CVE-2006-4625 USN-362-1  View
329626 63258 CVE-2006-4625 ADV-2007-1991  View
329627 63258 CVE-2006-4625 ADV-2007-2374  View
329628 63258 CVE-2006-4625 php-inirestore-security-bypass(28853)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58341 JVNDB-2006-000537 PHP の ini_restore() 関数における制限回避の脆弱性 PHP の ini_restore() 関数には、Apache HTTP Server の設定ファイル (httpd.conf や .htaccess) で PHP オプションの設定を行っている場合に、php.ini に記述される設定が適用されてしまう脆弱性が存在します。 CVE-2006-4625 20727 CVE-2006-4625 63258 3.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000537.html 2006-09-09 2007-04-01 View