CVE-2006-3011

Publication date 26 June 2006

Last updated 24 July 2024


Ubuntu priority

The error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and open_basedir restrictions via a "php://" or other scheme in the third argument, which disables safe mode.

Status

Package Ubuntu Release Status
php5 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Fixed 5.1.2-1ubuntu3.9

References

Related Ubuntu Security Notices (USN)

Other references