VDB
CVE-2006-0207
CVE-2006-0207
PUBLISHED
CVSS 5 MEDIUM
Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject arbitrary HTTP headers via a crafted Set-Cookie header, related to the (1) session extension (aka ext/session) and the (2) header function.
EPSS 5.00% · 89.9th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
5.00%
89.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| php | php | 5.0, 5.0.0, 5.0.1 |
Timeline
- Jan 13, 2006 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Oct 30, 2023 EPSS Score
- Dec 22, 2023 EPSS Score
References
- 19355 third-party-advisory
- 1015484 vdb
- USN-261-1 vendor-advisory
- SUSE-SR:2006:004 vendor-advisory
- 18431 third-party-advisory
- ADV-2006-0369 vdb
- ADV-2006-0177 vdb
- 19179 third-party-advisory
- http://www.hardened-php.net/advisory_012006.112.html url
- GLSA-200603-22 vendor-advisory
- DSA-1331 vendor-advisory
- 18697 third-party-advisory
- php-session-response-splitting(24094) vdb
- 25945 third-party-advisory
- MDKSA-2006:028 vendor-advisory
- http://www.php.net/release_5_1_2.php url
- 19012 third-party-advisory
- 16220 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2006-0207 advisory
- https://usn.ubuntu.com/261-1 url