Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2006-2660 | First vendor Publication | 2006-06-13 |
| Vendor | Cve | Last vendor Modification | 2018-10-30 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:L/AC:L/Au:N/C:N/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 2.1 | Attack Range | Local |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 3.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows local users to bypass restrictions and create PHP files with fixed names in other directories via a pathname argument longer than MAXPATHLEN, which prevents a unique string from being appended to the filename. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2660 |
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2012-06-21 | Name : PHP version smaller than 5.2.0 File : nvt/nopsec_php_5_2_0.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 27080 | PHP tempname() Function Buffer Consumption File Name Restriction Bypass |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2008-03-25 | Name : The remote web server uses a version of PHP that is affected by multiple buff... File : php_5_2_0.nasl - Type : ACT_GATHER_INFO |
| 2007-11-10 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-320-1.nasl - Type : ACT_GATHER_INFO |
| 2006-08-25 | Name : The remote web server uses a version of PHP that is affected by multiple flaws. File : php_4_4_3.nasl - Type : ACT_GATHER_INFO |
| 2006-07-17 | Name : The remote Mandrake Linux host is missing one or more security updates. File : mandrake_MDKSA-2006-122.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-02-02 01:04:15 |
|
| 2024-02-01 12:01:56 |
|
| 2023-09-05 12:03:59 |
|
| 2023-09-05 01:01:47 |
|
| 2023-09-02 12:04:03 |
|
| 2023-09-02 01:01:47 |
|
| 2023-08-12 12:04:48 |
|
| 2023-08-12 01:01:48 |
|
| 2023-08-11 12:04:07 |
|
| 2023-08-11 01:01:50 |
|
| 2023-08-06 12:03:53 |
|
| 2023-08-06 01:01:48 |
|
| 2023-08-04 12:03:58 |
|
| 2023-08-04 01:01:51 |
|
| 2023-07-14 12:03:57 |
|
| 2023-07-14 01:01:49 |
|
| 2023-03-29 01:04:13 |
|
| 2023-03-28 12:01:54 |
|
| 2022-10-11 12:03:30 |
|
| 2022-10-11 01:01:41 |
|
| 2021-05-04 12:04:05 |
|
| 2021-04-22 01:04:41 |
|
| 2020-05-23 00:17:50 |
|
| 2019-06-08 12:01:43 |
|
| 2018-10-31 00:19:45 |
|
| 2018-10-18 21:20:09 |
|
| 2017-07-20 09:23:37 |
|
| 2016-06-28 15:48:25 |
|
| 2016-04-26 14:40:25 |
|
| 2014-02-17 10:36:00 |
|
| 2013-05-11 10:58:21 |
|
