CVE-2006-7204

PHP < 4.4.4 - Arbitrary File Read and Directory Listing via imap_body

Title source: llm
STIX 2.1

Description

The imap_body function in PHP before 4.4.4 does not implement safemode or open_basedir checks, which allows local users to read arbitrary files or list arbitrary directory contents.

References (4)

Core 4
Core References
Broken Link, Patch vdb-entry x_refsource_osvdb
http://www.osvdb.org/28005
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21546
Vendor Advisory x_refsource_confirm
http://us2.php.net/ChangeLog-4.php#4.4.4
Vendor Advisory x_refsource_misc
http://bugs.php.net/bug.php?id=37265

Scores

EPSS 0.0010
EPSS Percentile 26.3%

Details

Status published
Products (1)
php/php 4.4.0 - 4.4.4
Published May 22, 2007
Tracked Since Feb 18, 2026