VDB
CVE-2006-1017
CVE-2006-1017
PUBLISHED
Reported by mitre · Published March 7, 2006
The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the (1) safe_mode or (2) open_basedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imap_open function, allow remote attackers to obtain access to an IMAP stream data structure and conduct unauthorized IMAP actions.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | n/a, n/a, n/a |
Timeline
- Mar 7, 2006 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 2, 2023 EPSS Score
- Jun 10, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
References
- ADV-2006-0772 vdb-entryx_refsource_VUPEN
- x_refsource_CONFIRM
- 23535 vdb-entryx_refsource_OSVDB
- 21050 third-party-advisoryx_refsource_SECUNIA
- 516 third-party-advisoryx_refsource_SREASON
- 21546 third-party-advisoryx_refsource_SECUNIA
- MDKSA-2006:122 vendor-advisoryx_refsource_MANDRIVA
- x_refsource_CONFIRM
- php-imap-restriction-bypass(24964) vdb-entryx_refsource_XF
- x_refsource_CONFIRM
- 20060228 (PHP) imap functions bypass safemode and open_basedir restrictions mailing-listx_refsource_BUGTRAQ
- 18694 third-party-advisoryx_refsource_SECUNIA