CVE-2006-2563 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2006-2563
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-2563

Description: The cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing null characters.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/26764 SUSE http://www.novell.com/linux/security/advisories/2006_52_php.html http://www.novell.com/linux/security/advisories/2006_22_sr.html ST 1016175 SREASONRES http://securityreason.com/achievement_securityalert/39 SREASON http://securityreason.com/securityalert/959 SAID Secunia Advisory: SA22039 Secunia Advisory: SA21847 Secunia Advisory: SA21050 Secunia Advisory: SA20337 MANDRIVA http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:122 BID 18116

Return to the previous page.