VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 31, 2006· Updated Jun 16, 2026

CVE-2006-4481

CVE-2006-4481

Description

The (1) file_exists and (2) imap_reopen functions in PHP before 5.1.5 do not check for the safe_mode and open_basedir settings, which allows local users to bypass the settings. NOTE: the error_log function is covered by CVE-2006-3011, and the imap_open function is covered by CVE-2006-1017.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • PHP/PHP5 versions
    cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*
    • (no CPE)range: <5.1.5

Patches

Vulnerability mechanics

References

10

News mentions

0

No linked articles in our index yet.