CVE-2006-7204

 

Published at: - 22-05-2007 09:30

Last modified: - 19-01-2023 05:26

Total changes: - 2

Description

The imap_body function in PHP before 4.4.4 does not implement safemode or open_basedir checks, which allows local users to read arbitrary files or list arbitrary directory contents.

Common Vulnerability Scoring System (CVSS)

AV:L/AC:L/Au:N/C:P/I:N/A:N

 

Verification logic

 

Reference

• http://bugs.php.net/bug.php?id=37265
• http://us2.php.net/ChangeLog-4.php#4.4.4
• 28005-Broken Link, Patch
• 21546-Patch, Vendor Advisory

 

Keywords

NVD

 

CVE-2006-7204

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures