CVE-2006-4481

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The (1) file_exists and (2) imap_reopen functions in PHP before 5.1.5 do not check for the safe_mode and open_basedir settings, which allows local users to bypass the settings. NOTE: the error_log function is covered by CVE-2006-3011, and the imap_open function is covered by CVE-2006-1017.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/21546Patch, Vendor Advisory
http://secunia.com/advisories/21768Patch, Vendor Advisory
http://secunia.com/advisories/21842Patch, Vendor Advisory
http://secunia.com/advisories/22039
http://www.mandriva.com/security/advisories?name=MDKSA-2006:162
http://www.novell.com/linux/security/advisories/2006_52_php.html
http://www.php.net/release_5_1_5.phpPatch
http://www.securityfocus.com/bid/19582
http://www.ubuntu.com/usn/usn-342-1
http://www.vupen.com/english/advisories/2006/3318
http://secunia.com/advisories/21546Patch, Vendor Advisory
http://secunia.com/advisories/21768Patch, Vendor Advisory
http://secunia.com/advisories/21842Patch, Vendor Advisory
http://secunia.com/advisories/22039
http://www.mandriva.com/security/advisories?name=MDKSA-2006:162
http://www.novell.com/linux/security/advisories/2006_52_php.html
http://www.php.net/release_5_1_5.phpPatch
http://www.securityfocus.com/bid/19582
http://www.ubuntu.com/usn/usn-342-1
http://www.vupen.com/english/advisories/2006/3318

Timeline

Published: Aug 31, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-44829.3Multiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext/standard/string.c in PHP before 5.1.5, when use CVE-2006-44839.3The cURL extension files (1) ext/curl/interface.c and (2) ext/curl/streams.c in PHP before 5.1.5 permit the CURLOPT_FOLLOWLOCATION option wh CVE-2006-44842.6Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to CVE-2006-448510.0The stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read.CVE-2006-44862.6Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to b CVE-2006-44875.0DUware DUpoll 3.0 and 3.1 stores _private/Dupoll.mdb under the web document root with insufficient access control, which allows remote attac CVE-2006-44885.1PHP remote file inclusion vulnerability in modules/userstop/userstop.php in ExBB Italia 0.2 and earlier, when register_globals is enabled, a CVE-2006-44897.5Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 (1.2.2) allow remote attackers to execute arbitrary PHP code via (CVE-2006-44904.0Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 allow remote authentic CVE-2006-44914.0Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon CVE-2006-44925.0Unspecified vulnerability in Cybozu Office 6.5 Build 1.2 for Windows allows remote attackers to obtain sensitive information, including user CVE-2006-44932.1xbiff2 1.9 creates $HOME/.xbiff2rc in a user's home directory with insecure file permissions, which allows local users to obtain sensitive i