NVD

Id
63784  
Name
CVE-2006-5178  
Description
Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the open_basedir restriction by using a combination of symlink, mkdir, and unlink functions to change the file path after the open_basedir check and before the file is opened by the underlying system, as demonstrated by symlinking a symlink into a subdirectory, to point to a parent directory via .. (dot dot) sequences, and then unlinking the resulting symlink.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-10-10  
Modified Date
2011-03-07  
Seq
2006-5178  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
332462 63784 CVE-2006-5178 20061003 Advisory 08/2006: PHP open_basedir Race Condition Vulnerability  View
332463 63784 CVE-2006-5178 1692  View
332464 63784 CVE-2006-5178 1016977  View
332465 63784 CVE-2006-5178 http://www.hardened-php.net/advisory_082006.132.html  View
332466 63784 CVE-2006-5178 MDKSA-2006:185  View
332467 63784 CVE-2006-5178 http://www.neosecurityteam.net/index.php?action=advisories&id=26  View
332468 63784 CVE-2006-5178 20061003 Advisory 08/2006: PHP open_basedir Race Condition Vulnerability  View
332469 63784 CVE-2006-5178 20061009 PHP open_basedir with symlink() function Race Condition PoC exploit  View
332470 63784 CVE-2006-5178 OpenPKG-SA-2006.023  View
332471 63784 CVE-2006-5178 20326  View
332472 63784 CVE-2006-5178 TLSA-2006-38  View
332473 63784 CVE-2006-5178 ADV-2006-3901  View
332474 63784 CVE-2006-5178 php-openbasedir-security-bypass(29340)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58470 JVNDB-2006-000666 PHP の symlink() 関数における open_basedir 制限回避の脆弱性 PHP に実装されている symlink() 関数には、引数として渡されるファイルパスのチェックに不備が存在するため、ディレクトリトラバーサル攻撃を介して、open_basedir やセーフモードによる制限を回避可能となる脆弱性が存在します。 CVE-2006-5178 21280 CVE-2006-5178 63784 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000666.html 2006-10-04 2007-04-01 View