CVE-2006-2660 | BDVDB-2026-17515 Detail
Description#
Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows local users to bypass restrictions and create PHP files with fixed names in other directories via a pathname argument longer than MAXPATHLEN, which prevents a unique string from being appended to the filename.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27049
- http://cvs.php.net/viewcvs.cgi/php-src/NEWS?view=markup&rev=1.1247.2.920.2.134
- http://www.securityfocus.com/archive/1/436785/100/0/threaded
- http://securitytracker.com/id?1016271
- http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0209.html
- http://www.ubuntu.com/usn/usn-320-1
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:122
- http://secunia.com/advisories/21125
- http://securityreason.com/securityalert/1069
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.