CVE-2006-2563
LOW severity · CVSS 2.1
2.1CVSS LOW
Summary
The cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing null characters.
Impact & exploitability
Attack vectorLocal
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impactNone
Availability impactNone
Exploit probability (EPSS)0%
AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://secunia.com/advisories/20337
- http://secunia.com/advisories/21050
- http://secunia.com/advisories/21847
- http://secunia.com/advisories/22039
- http://securityreason.com/achievement_securityalert/39
- http://securityreason.com/securityalert/959
- http://securitytracker.com/id?1016175
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:122