Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CERTA-2006-AVI-332
Vulnerability from certfr_avis
None
Description
Plusieurs vulnérabilités sont présentes dans PHP. Ces vulnérabilités peuvent être exploitées par un utilisateur mal intentionné pour réaliser un déni de service à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Les mises à jour sont disponibles à l'adresse suivante :
http://www.php.net/downloads.php
None
Impacted products
References
Title | Publication Time | Tags | |
---|---|---|---|
|
{ "$ref": "https://www.cert.ssi.gouv.fr/openapi.json", "affected_systems": [ { "description": "PHP versions 5.1.x ant\u00e9rieures \u00e0 la version 5.1.4 ;", "product": { "name": "PHP", "vendor": { "name": "PHP", "scada": false } } }, { "description": "PHP versions 4.4.x ant\u00e9rieures \u00e0 la version 4.4.3.", "product": { "name": "PHP", "vendor": { "name": "PHP", "scada": false } } } ], "affected_systems_content": null, "content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s sont pr\u00e9sentes dans PHP. Ces vuln\u00e9rabilit\u00e9s\npeuvent \u00eatre exploit\u00e9es par un utilisateur mal intentionn\u00e9 pour r\u00e9aliser\nun d\u00e9ni de service \u00e0 distance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n\nLes mises \u00e0 jour sont disponibles \u00e0 l\u0027adresse suivante :\n\n http://www.php.net/downloads.php\n", "cves": [ { "name": "CVE-2006-3018", "url": "https://www.cve.org/CVERecord?id=CVE-2006-3018" }, { "name": "CVE-2006-3017", "url": "https://www.cve.org/CVERecord?id=CVE-2006-3017" }, { "name": "CVE-2006-3016", "url": "https://www.cve.org/CVERecord?id=CVE-2006-3016" } ], "initial_release_date": "2006-08-04T00:00:00", "last_revision_date": "2006-09-26T00:00:00", "links": [ { "title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2006:122 du 13 juillet 2006 :", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:12" }, { "title": "Bulletin de s\u00e9curit\u00e9 Redhat RHSA-2006:0682 du 21 septembre 2006 :", "url": "http://rhn.redhat.com/errata/RHSA-2006-0682.html" }, { "title": "Bulletin de s\u00e9curit\u00e9 Redhat RHSA-2006:0567 du 25 juillet 2006 :", "url": "http://rhn.redhat.com/errata/RHSA-2006-0567.html" }, { "title": "Bulletin de s\u00e9curit\u00e9 Redhat RHSA-2006:0669 du 21 septembre 2006:", "url": "http://rhn.redhat.com/errata/RHSA-2006-0669.html" } ], "reference": "CERTA-2006-AVI-332", "revisions": [ { "description": "version initiale.", "revision_date": "2006-08-04T00:00:00.000000" }, { "description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 Red Hat et Mandriva.", "revision_date": "2006-09-26T00:00:00.000000" } ], "risks": [ { "description": "D\u00e9ni de service \u00e0 distance" } ], "summary": null, "title": "Multiples vuln\u00e9rabilit\u00e9s dans PHP", "vendor_advisories": [ { "published_at": null, "title": "Bulletin de s\u00e9curit\u00e9 PHP", "url": "http://www.php.net/release_5_1_4.php" } ] }
CVE-2006-3018 (GCVE-0-2006-3018)
Vulnerability from cvelistv5
Published
2006-06-14 23:00
Modified
2024-08-07 18:16
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
Unspecified vulnerability in the session extension functionality in PHP before 5.1.3 has unknown impact and attack vectors related to heap corruption.
References
URL | Tags | ||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-07T18:16:04.609Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "25254", "tags": [ "vdb-entry", "x_refsource_OSVDB", "x_transferred" ], "url": "http://www.osvdb.org/25254" }, { "name": "21050", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/21050" }, { "name": "USN-320-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred" ], "url": "http://www.ubuntu.com/usn/usn-320-1" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.php.net/release_5_1_3.php" }, { "name": "MDKSA-2006:122", "tags": [ "vendor-advisory", "x_refsource_MANDRIVA", "x_transferred" ], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122" }, { "name": "21125", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/21125" }, { "name": "19927", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/19927" }, { "name": "1016306", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://securitytracker.com/id?1016306" }, { "name": "17843", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/17843" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2006-05-02T00:00:00", "descriptions": [ { "lang": "en", "value": "Unspecified vulnerability in the session extension functionality in PHP before 5.1.3 has unknown impact and attack vectors related to heap corruption." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2006-06-27T09:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "name": "25254", "tags": [ "vdb-entry", "x_refsource_OSVDB" ], "url": "http://www.osvdb.org/25254" }, { "name": "21050", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/21050" }, { "name": "USN-320-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU" ], "url": "http://www.ubuntu.com/usn/usn-320-1" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.php.net/release_5_1_3.php" }, { "name": "MDKSA-2006:122", "tags": [ "vendor-advisory", "x_refsource_MANDRIVA" ], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122" }, { "name": "21125", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/21125" }, { "name": "19927", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/19927" }, { "name": "1016306", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://securitytracker.com/id?1016306" }, { "name": "17843", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/17843" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-3018", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Unspecified vulnerability in the session extension functionality in PHP before 5.1.3 has unknown impact and attack vectors related to heap corruption." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "25254", "refsource": "OSVDB", "url": "http://www.osvdb.org/25254" }, { "name": "21050", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21050" }, { "name": "USN-320-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/usn-320-1" }, { "name": "http://www.php.net/release_5_1_3.php", "refsource": "CONFIRM", "url": "http://www.php.net/release_5_1_3.php" }, { "name": "MDKSA-2006:122", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122" }, { "name": "21125", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21125" }, { "name": "19927", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19927" }, { "name": "1016306", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016306" }, { "name": "17843", "refsource": "BID", "url": "http://www.securityfocus.com/bid/17843" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-3018", "datePublished": "2006-06-14T23:00:00", "dateReserved": "2006-06-14T00:00:00", "dateUpdated": "2024-08-07T18:16:04.609Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
CVE-2006-3016 (GCVE-0-2006-3016)
Vulnerability from cvelistv5
Published
2006-06-14 23:00
Modified
2024-08-07 18:16
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "certain characters in session names," including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and HTTP response splitting vulnerabilities. NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name().
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-07T18:16:04.911Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://issues.rpath.com/browse/RPL-683" }, { "name": "RHSA-2006:0669", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://www.redhat.com/support/errata/RHSA-2006-0669.html" }, { "name": "oval:org.mitre.oval:def:10597", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred" ], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10597" }, { "name": "22487", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/22487" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm" }, { "name": "TLSA-2006-38", "tags": [ "vendor-advisory", "x_refsource_TURBO", "x_transferred" ], "url": "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt" }, { "name": "21050", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/21050" }, { "name": "23247", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/23247" }, { "name": "22004", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/22004" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm" }, { "name": "RHSA-2006:0682", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://www.redhat.com/support/errata/RHSA-2006-0682.html" }, { "name": "USN-320-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred" ], "url": "http://www.ubuntu.com/usn/usn-320-1" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.php.net/release_5_1_3.php" }, { "name": "22440", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/22440" }, { "name": "20061005 rPSA-2006-0182-1 php php-mysql php-pgsql", "tags": [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred" ], "url": "http://www.securityfocus.com/archive/1/447866/100/0/threaded" }, { "name": "22069", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/22069" }, { "name": "22225", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/22225" }, { "name": "MDKSA-2006:122", "tags": [ "vendor-advisory", "x_refsource_MANDRIVA", "x_transferred" ], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122" }, { "name": "25253", "tags": [ "vdb-entry", "x_refsource_OSVDB", "x_transferred" ], "url": "http://www.osvdb.org/25253" }, { "name": "19927", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/19927" }, { "name": "1016306", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://securitytracker.com/id?1016306" }, { "name": "20061001-01-P", "tags": [ "vendor-advisory", "x_refsource_SGI", "x_transferred" ], "url": "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc" }, { "name": "17843", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/17843" }, { "name": "RHSA-2006:0736", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://rhn.redhat.com/errata/RHSA-2006-0736.html" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2006-05-02T00:00:00", "descriptions": [ { "lang": "en", "value": "Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to \"certain characters in session names,\" including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and HTTP response splitting vulnerabilities. NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name()." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2018-10-18T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "tags": [ "x_refsource_CONFIRM" ], "url": "https://issues.rpath.com/browse/RPL-683" }, { "name": "RHSA-2006:0669", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://www.redhat.com/support/errata/RHSA-2006-0669.html" }, { "name": "oval:org.mitre.oval:def:10597", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL" ], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10597" }, { "name": "22487", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/22487" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm" }, { "name": "TLSA-2006-38", "tags": [ "vendor-advisory", "x_refsource_TURBO" ], "url": "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt" }, { "name": "21050", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/21050" }, { "name": "23247", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/23247" }, { "name": "22004", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/22004" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm" }, { "name": "RHSA-2006:0682", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://www.redhat.com/support/errata/RHSA-2006-0682.html" }, { "name": "USN-320-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU" ], "url": "http://www.ubuntu.com/usn/usn-320-1" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.php.net/release_5_1_3.php" }, { "name": "22440", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/22440" }, { "name": "20061005 rPSA-2006-0182-1 php php-mysql php-pgsql", "tags": [ "mailing-list", "x_refsource_BUGTRAQ" ], "url": "http://www.securityfocus.com/archive/1/447866/100/0/threaded" }, { "name": "22069", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/22069" }, { "name": "22225", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/22225" }, { "name": "MDKSA-2006:122", "tags": [ "vendor-advisory", "x_refsource_MANDRIVA" ], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122" }, { "name": "25253", "tags": [ "vdb-entry", "x_refsource_OSVDB" ], "url": "http://www.osvdb.org/25253" }, { "name": "19927", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/19927" }, { "name": "1016306", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://securitytracker.com/id?1016306" }, { "name": "20061001-01-P", "tags": [ "vendor-advisory", "x_refsource_SGI" ], "url": "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc" }, { "name": "17843", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/17843" }, { "name": "RHSA-2006:0736", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://rhn.redhat.com/errata/RHSA-2006-0736.html" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-3016", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to \"certain characters in session names,\" including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and HTTP response splitting vulnerabilities. NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name()." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://issues.rpath.com/browse/RPL-683", "refsource": "CONFIRM", "url": "https://issues.rpath.com/browse/RPL-683" }, { "name": "RHSA-2006:0669", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2006-0669.html" }, { "name": "oval:org.mitre.oval:def:10597", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10597" }, { "name": "22487", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/22487" }, { "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm", "refsource": "CONFIRM", "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm" }, { "name": "TLSA-2006-38", "refsource": "TURBO", "url": "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt" }, { "name": "21050", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21050" }, { "name": "23247", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/23247" }, { "name": "22004", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/22004" }, { "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm", "refsource": "CONFIRM", "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm" }, { "name": "RHSA-2006:0682", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2006-0682.html" }, { "name": "USN-320-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/usn-320-1" }, { "name": "http://www.php.net/release_5_1_3.php", "refsource": "CONFIRM", "url": "http://www.php.net/release_5_1_3.php" }, { "name": "22440", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/22440" }, { "name": "20061005 rPSA-2006-0182-1 php php-mysql php-pgsql", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/447866/100/0/threaded" }, { "name": "22069", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/22069" }, { "name": "22225", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/22225" }, { "name": "MDKSA-2006:122", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122" }, { "name": "25253", "refsource": "OSVDB", "url": "http://www.osvdb.org/25253" }, { "name": "19927", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19927" }, { "name": "1016306", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016306" }, { "name": "20061001-01-P", "refsource": "SGI", "url": "ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc" }, { "name": "17843", "refsource": "BID", "url": "http://www.securityfocus.com/bid/17843" }, { "name": "RHSA-2006:0736", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2006-0736.html" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-3016", "datePublished": "2006-06-14T23:00:00", "dateReserved": "2006-06-14T00:00:00", "dateUpdated": "2024-08-07T18:16:04.911Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
CVE-2006-3017 (GCVE-0-2006-3017)
Vulnerability from cvelistv5
Published
2006-06-14 23:00
Modified
2024-08-07 18:16
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations.
References
URL | Tags | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-07T18:16:05.512Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "21723", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/21723" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://issues.rpath.com/browse/RPL-683" }, { "name": "21252", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/21252" }, { "name": "21202", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/21202" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0\u0026view=log" }, { "name": "TLSA-2006-38", "tags": [ "vendor-advisory", "x_refsource_TURBO", "x_transferred" ], "url": "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0\u0026r1=1.87.4.8.2.1\u0026r2=1.87.4.8.2.2" }, { "name": "DSA-1206", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "http://www.debian.org/security/2006/dsa-1206" }, { "name": "21050", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/21050" }, { "name": "SUSE-SA:2006:031", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://www.novell.com/linux/security/advisories/2006_31_php.html" }, { "name": "20060806 PHP: Zend_Hash_Del_Key_Or_Index Vulnerability", "tags": [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred" ], "url": "http://www.securityfocus.com/archive/1/442437/100/0/threaded" }, { "name": "26466", "tags": [ "vdb-entry", "x_refsource_OSVDB", "x_transferred" ], "url": "http://www.osvdb.org/26466" }, { "name": "22713", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/22713" }, { "name": "RHSA-2006:0568", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://www.redhat.com/support/errata/RHSA-2006-0568.html" }, { "name": "21135", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/21135" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://www.php.net/release_5_1_3.php" }, { "name": "20061005 rPSA-2006-0182-1 php php-mysql php-pgsql", "tags": [ "mailing-list", "x_refsource_BUGTRAQ", "x_transferred" ], "url": "http://www.securityfocus.com/archive/1/447866/100/0/threaded" }, { "name": "1016649", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://securitytracker.com/id?1016649" }, { "name": "RHSA-2006:0549", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html" }, { "name": "22225", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/22225" }, { "name": "MDKSA-2006:122", "tags": [ "vendor-advisory", "x_refsource_MANDRIVA", "x_transferred" ], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122" }, { "name": "21125", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/21125" }, { "name": "19927", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/19927" }, { "name": "25255", "tags": [ "vdb-entry", "x_refsource_OSVDB", "x_transferred" ], "url": "http://www.osvdb.org/25255" }, { "name": "php-zendhashdel-unspecified(27396)", "tags": [ "vdb-entry", "x_refsource_XF", "x_transferred" ], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27396" }, { "name": "1016306", "tags": [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred" ], "url": "http://securitytracker.com/id?1016306" }, { "name": "21031", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/21031" }, { "name": "RHSA-2006:0567", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://www.redhat.com/support/errata/RHSA-2006-0567.html" }, { "name": "20060701-01-U", "tags": [ "vendor-advisory", "x_refsource_SGI", "x_transferred" ], "url": "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U" }, { "name": "oval:org.mitre.oval:def:10118", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL", "x_transferred" ], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10118" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_vulnerability.html" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm" }, { "name": "USN-320-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU", "x_transferred" ], "url": "https://usn.ubuntu.com/320-1/" }, { "name": "20060806 PHP: Zend_Hash_Del_Key_Or_Index Vulnerability", "tags": [ "mailing-list", "x_refsource_FULLDISC", "x_transferred" ], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0166.html" }, { "name": "SUSE-SA:2006:034", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://www.novell.com/linux/security/advisories/2006_34_php4.html" }, { "name": "17843", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/17843" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2006-05-02T00:00:00", "descriptions": [ { "lang": "en", "value": "zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable\u0027s value to be used in security-relevant operations." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2018-10-18T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "name": "21723", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/21723" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://issues.rpath.com/browse/RPL-683" }, { "name": "21252", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/21252" }, { "name": "21202", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/21202" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0\u0026view=log" }, { "name": "TLSA-2006-38", "tags": [ "vendor-advisory", "x_refsource_TURBO" ], "url": "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0\u0026r1=1.87.4.8.2.1\u0026r2=1.87.4.8.2.2" }, { "name": "DSA-1206", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "http://www.debian.org/security/2006/dsa-1206" }, { "name": "21050", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/21050" }, { "name": "SUSE-SA:2006:031", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://www.novell.com/linux/security/advisories/2006_31_php.html" }, { "name": "20060806 PHP: Zend_Hash_Del_Key_Or_Index Vulnerability", "tags": [ "mailing-list", "x_refsource_BUGTRAQ" ], "url": "http://www.securityfocus.com/archive/1/442437/100/0/threaded" }, { "name": "26466", "tags": [ "vdb-entry", "x_refsource_OSVDB" ], "url": "http://www.osvdb.org/26466" }, { "name": "22713", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/22713" }, { "name": "RHSA-2006:0568", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://www.redhat.com/support/errata/RHSA-2006-0568.html" }, { "name": "21135", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/21135" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://www.php.net/release_5_1_3.php" }, { "name": "20061005 rPSA-2006-0182-1 php php-mysql php-pgsql", "tags": [ "mailing-list", "x_refsource_BUGTRAQ" ], "url": "http://www.securityfocus.com/archive/1/447866/100/0/threaded" }, { "name": "1016649", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://securitytracker.com/id?1016649" }, { "name": "RHSA-2006:0549", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html" }, { "name": "22225", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/22225" }, { "name": "MDKSA-2006:122", "tags": [ "vendor-advisory", "x_refsource_MANDRIVA" ], "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122" }, { "name": "21125", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/21125" }, { "name": "19927", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/19927" }, { "name": "25255", "tags": [ "vdb-entry", "x_refsource_OSVDB" ], "url": "http://www.osvdb.org/25255" }, { "name": "php-zendhashdel-unspecified(27396)", "tags": [ "vdb-entry", "x_refsource_XF" ], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27396" }, { "name": "1016306", "tags": [ "vdb-entry", "x_refsource_SECTRACK" ], "url": "http://securitytracker.com/id?1016306" }, { "name": "21031", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/21031" }, { "name": "RHSA-2006:0567", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://www.redhat.com/support/errata/RHSA-2006-0567.html" }, { "name": "20060701-01-U", "tags": [ "vendor-advisory", "x_refsource_SGI" ], "url": "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U" }, { "name": "oval:org.mitre.oval:def:10118", "tags": [ "vdb-entry", "signature", "x_refsource_OVAL" ], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10118" }, { "tags": [ "x_refsource_MISC" ], "url": "http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_vulnerability.html" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm" }, { "name": "USN-320-1", "tags": [ "vendor-advisory", "x_refsource_UBUNTU" ], "url": "https://usn.ubuntu.com/320-1/" }, { "name": "20060806 PHP: Zend_Hash_Del_Key_Or_Index Vulnerability", "tags": [ "mailing-list", "x_refsource_FULLDISC" ], "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0166.html" }, { "name": "SUSE-SA:2006:034", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://www.novell.com/linux/security/advisories/2006_34_php4.html" }, { "name": "17843", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/17843" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-3017", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable\u0027s value to be used in security-relevant operations." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "21723", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21723" }, { "name": "https://issues.rpath.com/browse/RPL-683", "refsource": "CONFIRM", "url": "https://issues.rpath.com/browse/RPL-683" }, { "name": "21252", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21252" }, { "name": "21202", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21202" }, { "name": "http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0\u0026view=log", "refsource": "CONFIRM", "url": "http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0\u0026view=log" }, { "name": "TLSA-2006-38", "refsource": "TURBO", "url": "http://www.turbolinux.com/security/2006/TLSA-2006-38.txt" }, { "name": "http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0\u0026r1=1.87.4.8.2.1\u0026r2=1.87.4.8.2.2", "refsource": "CONFIRM", "url": "http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0\u0026r1=1.87.4.8.2.1\u0026r2=1.87.4.8.2.2" }, { "name": "DSA-1206", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2006/dsa-1206" }, { "name": "21050", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21050" }, { "name": "SUSE-SA:2006:031", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/2006_31_php.html" }, { "name": "20060806 PHP: Zend_Hash_Del_Key_Or_Index Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/442437/100/0/threaded" }, { "name": "26466", "refsource": "OSVDB", "url": "http://www.osvdb.org/26466" }, { "name": "22713", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/22713" }, { "name": "RHSA-2006:0568", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2006-0568.html" }, { "name": "21135", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21135" }, { "name": "http://www.php.net/release_5_1_3.php", "refsource": "CONFIRM", "url": "http://www.php.net/release_5_1_3.php" }, { "name": "20061005 rPSA-2006-0182-1 php php-mysql php-pgsql", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/447866/100/0/threaded" }, { "name": "1016649", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016649" }, { "name": "RHSA-2006:0549", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2006-0549.html" }, { "name": "22225", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/22225" }, { "name": "MDKSA-2006:122", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:122" }, { "name": "21125", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21125" }, { "name": "19927", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/19927" }, { "name": "25255", "refsource": "OSVDB", "url": "http://www.osvdb.org/25255" }, { "name": "php-zendhashdel-unspecified(27396)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27396" }, { "name": "1016306", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016306" }, { "name": "21031", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21031" }, { "name": "RHSA-2006:0567", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2006-0567.html" }, { "name": "20060701-01-U", "refsource": "SGI", "url": "ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U" }, { "name": "oval:org.mitre.oval:def:10118", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10118" }, { "name": "http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_vulnerability.html", "refsource": "MISC", "url": "http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_vulnerability.html" }, { "name": "http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm", "refsource": "CONFIRM", "url": "http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm" }, { "name": "USN-320-1", "refsource": "UBUNTU", "url": "https://usn.ubuntu.com/320-1/" }, { "name": "20060806 PHP: Zend_Hash_Del_Key_Or_Index Vulnerability", "refsource": "FULLDISC", "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0166.html" }, { "name": "SUSE-SA:2006:034", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/2006_34_php4.html" }, { "name": "17843", "refsource": "BID", "url": "http://www.securityfocus.com/bid/17843" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-3017", "datePublished": "2006-06-14T23:00:00", "dateReserved": "2006-06-14T00:00:00", "dateUpdated": "2024-08-07T18:16:05.512Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…