Unscored CVE-2006-2563 EUVD-2006-2563GHSA-vgv5-c6v7-9jrc

The cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing null…

Published May 29, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

The cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing null characters.

References

21847 third-party-advisory
20337 third-party-advisory
18116 vdb-entry
22039 third-party-advisory
21050 third-party-advisory
959 third-party-advisory
20060526 cURL Safe Mode Bypass PHP 4.4.2 and 5.1.4 third-party-advisory
MDKSA-2006:122 vendor-advisory
php-curl-safemode-bypass(26764) vdb-entry
SUSE-SR:2006:022 vendor-advisory
1016175 vdb-entry
ADV-2006-2055 vdb-entry
SUSE-SA:2006:052 vendor-advisory