CVE-2006-1017 The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the (1) safe_mode or (2) open_basedir functions, and when used in applications that accept user-controll...
HighCVSS 9.3
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the (1) safe_mode or (2) open_basedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imap_open function, allow remote attackers to obtain access to an IMAP stream data structure and conduct unauthorized IMAP actions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | = 3.0 | No fix listed |
| PHP | = 3.0.1 | No fix listed |
| PHP | = 3.0.2 | No fix listed |
| PHP | = 3.0.3 | No fix listed |
| PHP | = 3.0.4 | No fix listed |
| PHP | = 3.0.5 | No fix listed |
| PHP | = 3.0.6 | No fix listed |
| PHP | = 3.0.7 | No fix listed |
| PHP | = 3.0.8 | No fix listed |
| PHP | = 3.0.9 | No fix listed |
| PHP | = 3.0.10 | No fix listed |
| PHP | = 3.0.11 | No fix listed |
| PHP | = 3.0.12 | No fix listed |
| PHP | = 3.0.13 | No fix listed |
| PHP | = 3.0.14 | No fix listed |
| PHP | = 3.0.15 | No fix listed |
| PHP | = 3.0.16 | No fix listed |
| PHP | = 3.0.17 | No fix listed |
| PHP | = 3.0.18 | No fix listed |
| PHP | = 4.0.0 | No fix listed |
| PHP | = 4.0.1 | No fix listed |
| PHP | = 4.0.1-patch1 | No fix listed |
| PHP | = 4.0.1-patch2 | No fix listed |
| PHP | = 4.0.2 | No fix listed |
| PHP | = 4.0.3 | No fix listed |
Show 53 more
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | = 4.0.3-patch1 | No fix listed |
| PHP | = 4.0.4 | No fix listed |
| PHP | = 4.0.5 | No fix listed |
| PHP | = 4.0.6 | No fix listed |
| PHP | = 4.0.7 | No fix listed |
| PHP | = 4.0.7-rc1 | No fix listed |
| PHP | = 4.0.7-rc2 | No fix listed |
| PHP | = 4.0.7-rc3 | No fix listed |
| PHP | = 4.1.0 | No fix listed |
| PHP | = 4.1.1 | No fix listed |
| PHP | = 4.1.2 | No fix listed |
| PHP | = 4.2 | No fix listed |
| PHP | = 4.2.0 | No fix listed |
| PHP | = 4.2.1 | No fix listed |
| PHP | = 4.2.2 | No fix listed |
| PHP | = 4.2.3 | No fix listed |
| PHP | = 4.3.0 | No fix listed |
| PHP | = 4.3.1 | No fix listed |
| PHP | = 4.3.2 | No fix listed |
| PHP | = 4.3.3 | No fix listed |
| PHP | = 4.3.4 | No fix listed |
| PHP | = 4.3.5 | No fix listed |
| PHP | = 4.3.6 | No fix listed |
| PHP | = 4.3.7 | No fix listed |
| PHP | = 4.3.8 | No fix listed |
| PHP | = 4.3.9 | No fix listed |
| PHP | = 4.3.10 | No fix listed |
| PHP | = 4.3.11 | No fix listed |
| PHP | = 4.4.0 | No fix listed |
| PHP | = 4.4.1 | No fix listed |
| PHP | = 4.4.2 | No fix listed |
| PHP | = 4.4.3 | No fix listed |
| PHP | = 5.0-rc1 | No fix listed |
| PHP | = 5.0-rc2 | No fix listed |
| PHP | = 5.0-rc3 | No fix listed |
| PHP | = 5.0.0 | No fix listed |
| PHP | = 5.0.0-beta1 | No fix listed |
| PHP | = 5.0.0-beta2 | No fix listed |
| PHP | = 5.0.0-beta3 | No fix listed |
| PHP | = 5.0.0-beta4 | No fix listed |
| PHP | = 5.0.0-rc1 | No fix listed |
| PHP | = 5.0.0-rc2 | No fix listed |
| PHP | = 5.0.0-rc3 | No fix listed |
| PHP | = 5.0.1 | No fix listed |
| PHP | = 5.0.2 | No fix listed |
| PHP | = 5.0.3 | No fix listed |
| PHP | = 5.0.4 | No fix listed |
| PHP | = 5.0.5 | No fix listed |
| PHP | = 5.1.0 | No fix listed |
| PHP | = 5.1.1 | No fix listed |
| PHP | = 5.1.2 | No fix listed |
| PHP | = 5.1.3 | No fix listed |
| PHP | = 5.1.4 | No fix listed |
References
- bugs.php.net
- 18694 third-party-advisory vendor-advisory
- 21050 third-party-advisory vendor-advisory
- 21546 third-party-advisory vendor-advisory
- 516 third-party-advisory
- MDKSA-2006:122 vendor-advisory
- 23535 vdb-entry
- www.php.net
- www.php.net
- 20060228 (PHP) imap functions bypass safemode and open_basedir restrictions mailing-list
- ADV-2006-0772 vdb-entry vendor-advisory
- php-imap-restriction-bypass(24964) vdb-entry