CVE-2006-4020 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2006-4020
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-4020

Description: scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read.

CVE Status: Candidate

References: UBUNTU http://www.ubuntu.com/usn/usn-342-1 SUSE http://www.novell.com/linux/security/advisories/2006_52_php.html http://www.novell.com/linux/security/advisories/2006_22_sr.html http://www.novell.com/linux/security/advisories/2006_19_sr.html http://www.novell.com/linux/security/advisories/2006_20_sr.html ST 1016984 SREASON http://securityreason.com/securityalert/1341 SGI SAID Secunia Advisory: SA23247 Secunia Advisory: SA22039 Secunia Advisory: SA21847 Secunia Advisory: SA22487 Secunia Advisory: SA22538 Secunia Advisory: SA22440 Secunia Advisory: SA22069 Secunia Advisory: SA22004 Secunia Advisory: SA21768 Secunia Advisory: SA21683 Secunia Advisory: SA21546 Secunia Advisory: SA21608 Secunia Advisory: SA21403 Secunia Advisory: SA21467 REDHAT http://www.redhat.com/support/errata/RHSA-2006-0682.html http://rhn.redhat.com/errata/RHSA-2006-0736.html http://www.redhat.com/support/errata/RHSA-2006-0669.html http://rhn.redhat.com/errata/RHSA-2006-0688.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11062 MISC http://www.plain-text.info/sscanf_bug.txt MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2006:144 GENTOO http://security.gentoo.org/glsa/glsa-200608-28.xml CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm http://www.php.net/release_5_1_5.php http://www.php.net/ChangeLog-5.php#5.1.5 http://bugs.php.net/bug.php?id=38322 BUGTRAQ http://www.securityfocus.com/archive/1/442438/30/0/threaded BID 19415

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability