CVE-2006-3011
PHP < 4.4.4 and 5.x < 5.1.5 - Safe Mode Bypass via error_log Scheme Injection
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-3011.
AI-analyzed exploit summary The document describes a safe_mode bypass vulnerability in PHP 5.2.6 where the error_log directive can be manipulated via .htaccess when safe_mode is enabled using php_admin_flag, allowing arbitrary file writes. It includes technical details, exploit example, and mitigation advice.
Description
The error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and open_basedir restrictions via a "php://" or other scheme in the third argument, which disables safe mode.
Exploits (1)
The document describes a safe_mode bypass vulnerability in PHP 5.2.6 where the error_log directive can be manipulated via .htaccess when safe_mode is enabled using php_admin_flag, allowing arbitrary file writes. It includes technical details, exploit example, and mitigation advice.