NVD

Id
65786  
Name
CVE-2006-7243  
Description
PHP before 5.3.4 accepts the character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php.jpg at the end of the argument to the file_exists function.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2011-01-18  
Modified Date
2016-12-06  
Seq
2006-7243  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
342549 65786 CVE-2006-7243 http://bugs.php.net/39863  View
342550 65786 CVE-2006-7243 APPLE-SA-2011-03-21-1  View
342551 65786 CVE-2006-7243 FEDORA-2015-8281  View
342552 65786 CVE-2006-7243 FEDORA-2015-8383  View
342553 65786 CVE-2006-7243 FEDORA-2015-8370  View
342554 65786 CVE-2006-7243 HPSBUX02741  View
342555 65786 CVE-2006-7243 SSRT100826  View
342556 65786 CVE-2006-7243 [oss-security] 20101118 NULL byte poisoning fix in php 5.3.4+  View
342557 65786 CVE-2006-7243 [oss-security] 20101118 Re: NULL byte poisoning fix in php 5.3.4+  View
342558 65786 CVE-2006-7243 [oss-security] 20101209 Re: Re: NULL byte poisoning fix in php 5.3.4+  View
342559 65786 CVE-2006-7243 [oss-security] 20101209 Re: Re: NULL byte poisoning fix in php 5.3.4+  View
342560 65786 CVE-2006-7243 [oss-security] 20101209 Re: Re: NULL byte poisoning fix in php 5.3.4+  View
342561 65786 CVE-2006-7243 oval:org.mitre.oval:def:12569  View
342562 65786 CVE-2006-7243 RHSA-2013:1307  View
342563 65786 CVE-2006-7243 RHSA-2013:1615  View
342564 65786 CVE-2006-7243 RHSA-2014:0311  View
342565 65786 CVE-2006-7243 http://support.apple.com/kb/HT4581  View
342566 65786 CVE-2006-7243 http://svn.php.net/viewvc?view=revision&revision=305412  View
342567 65786 CVE-2006-7243 http://svn.php.net/viewvc?view=revision&revision=305507  View
342568 65786 CVE-2006-7243 http://www.madirish.net/?article=436  View
342569 65786 CVE-2006-7243 MDVSA-2010:254  View
342570 65786 CVE-2006-7243 http://www.php.net/archive/2010.php#id2010-12-10-1  View
342571 65786 CVE-2006-7243 http://www.php.net/ChangeLog-5.php  View
342572 65786 CVE-2006-7243 http://www.php.net/releases/5_3_4.php  View
342573 65786 CVE-2006-7243 44951  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58731 JVNDB-2006-000997 PHP におけるアクセス制限を回避される脆弱性 PHP は、パス名内にある Null 文字を許可するため、アクセス制限を回避される脆弱性が存在します。 CVE-2006-7243 23345 CVE-2006-7243 65786 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000997.html 2006-12-18 2015-08-13 View