CVE-2006-1494
PHP 4.4.2 and 5.1.2 - Directory Traversal via tempnam Function
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-1494. PoCs published by Maksymilian Arciemowicz.
AI-analyzed exploit summary This exploit demonstrates a bypass of PHP's 'safe_mode' and 'open_basedir' restrictions by leveraging the 'tempnam' function to traverse directories outside the intended base directory. It is effective in shared-hosting environments where these restrictions are relied upon for isolation.
Description
Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function.
Exploits (1)
This exploit demonstrates a bypass of PHP's 'safe_mode' and 'open_basedir' restrictions by leveraging the 'tempnam' function to traverse directories outside the intended base directory. It is effective in shared-hosting environments where these restrictions are relied upon for isolation.