VDB
CVE-2006-0207
CVE-2006-0207
PUBLISHED
CVSS 5 MEDIUM
Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject arbitrary HTTP headers via a crafted Set-Cookie header, related to the (1) session extension (aka ext/session) and the (2) header function.
EPSS 4.35% · 91.2th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
4.35%
91.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| php | php | 5.0.0, 5.0.1, 5.0.2 |
Timeline
- Jan 13, 2006 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Sep 11, 2023 EPSS Score
- Nov 3, 2023 EPSS Score
- Dec 26, 2023 EPSS Score
References
- 19355 third-party-advisory
- 1015484 vdb
- 18431 third-party-advisory
- ADV-2006-0177 vdb
- 25945 third-party-advisory
- MDKSA-2006:028 vendor-advisory
- 19179 third-party-advisory
- php-session-response-splitting(24094) vdb
- https://nvd.nist.gov/vuln/detail/CVE-2006-0207 advisory
- https://usn.ubuntu.com/261-1 url
- http://secunia.com/advisories/19012 url
- http://www.debian.org/security/2007/dsa-1331 url
- http://www.gentoo.org/security/en/glsa/glsa-200603-22.xml url
- http://www.securityfocus.com/bid/16220 url
- http://www.hardened-php.net/advisory_012006.112.html advisory
- http://www.vupen.com/english/advisories/2006/0369 advisory
- http://lists.suse.de/archive/suse-security-announce/2006-Feb/0008.html technical
- http://secunia.com/advisories/18697 patch
- http://www.php.net/release_5_1_2.php technical
- https://usn.ubuntu.com/261-1/ technical