CVE-2006-1608
PHP 4.4.2 and 5.1.2 - Local Arbitrary File Read via compress.zlib:// URI in copy Function
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-1608. PoCs published by Maksymilian Arciemowicz.
AI-analyzed exploit summary This exploit demonstrates a bypass of PHP's 'safe_mode' and 'open_basedir' restrictions by using the 'compress.zlib://' wrapper to read sensitive files (e.g., /etc/passwd) and write them to an unauthorized location. It leverages a vulnerability in PHP versions 4.4.2 and 5.1.2.
Description
The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress.zlib:// URI.
Exploits (1)
This exploit demonstrates a bypass of PHP's 'safe_mode' and 'open_basedir' restrictions by using the 'compress.zlib://' wrapper to read sensitive files (e.g., /etc/passwd) and write them to an unauthorized location. It leverages a vulnerability in PHP versions 4.4.2 and 5.1.2.