CVE-2006-5706

Published: Nov 4, 2006Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Unspecified vulnerabilities in PHP, probably before 5.2.0, allow local users to bypass open_basedir restrictions and perform unspecified actions via unspecified vectors involving the (1) chdir and (2) tempnam functions. NOTE: the tempnam vector might overlap CVE-2006-1494.

Affected (16)

Products: Php: Php

Php

1 product

Php

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Php Php	Up to 5.1.6
Php Php	Version 5.0.0
Php Php	Version 5.0.1
Php Php	Version 5.0.2
Php Php	Version 5.0.3
Php Php	Version 5.0.4
Php Php	Version 5.0.5
Php Php	Version 5.0 rc1
Php Php	Version 5.0 rc2
Php Php	Version 5.0 rc3
Php Php	Version 5.1.0
Php Php	Version 5.1.1
Php Php	Version 5.1.2
Php Php	Version 5.1.3
Php Php	Version 5.1.4
Php Php	Version 5.1.5

References (4)

http://www.php.net/releases/5_2_0.php

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-375-1

Source: cve@mitre.org

http://www.php.net/releases/5_2_0.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-375-1

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.