The imap_body function in PHP before 4.4.4 does not implement safemode or open_basedir checks, which allows local users to read arbitrary files or list arbitrary directory contents.
References
| Link | Resource |
|---|---|
| http://bugs.php.net/bug.php?id=37265 | Vendor Advisory |
| http://us2.php.net/ChangeLog-4.php#4.4.4 | Vendor Advisory |
| http://www.osvdb.org/28005 | Broken Link Patch |
| http://secunia.com/advisories/21546 | Patch Vendor Advisory |
Configurations
Information
Published : 2007-05-22 12:30
Updated : 2023-01-19 08:26
NVD link : CVE-2006-7204
Mitre link : CVE-2006-7204
JSON object : View
CWE
Products Affected
php
- php


