CVE-2006-3011
MEDIUM 4.6EPSS 1.3%
The error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and open_basedir restrictions via a "php://" or other scheme in the third argument, which disables safe mode.
- CVSS v2.0 NVD
- 4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 1.34% chance of exploitation in the next 30 days, 71st percentile
- Published
- 2006-06-26
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://secunia.com/advisories/20818
- http://secunia.com/advisories/21050
- http://secunia.com/advisories/21125
- http://secunia.com/advisories/21546
- http://www.vupen.com/english/advisories/2006/2523
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:122
- http://www.securityfocus.com/bid/18645
- http://www.ubuntu.com/usn/usn-320-1