Unrated severityNVD Advisory· Published Dec 10, 2006· Updated Jun 16, 2026
CVE-2006-6383
CVE-2006-6383
Description
PHP 5.2.0 and 4.4 allows local users to bypass safe_mode and open_basedir restrictions via a malicious path and a null byte before a ";" in a session_save_path argument, followed by an allowed path, which causes a parsing inconsistency in which PHP validates the allowed path but sets session.save_path to the malicious path.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
10- securityreason.com/achievement_securityalert/43nvdExploit
- www.securityfocus.com/bid/21508nvdExploit
- secunia.com/advisories/24022nvdVendor Advisory
- secunia.com/advisories/24514nvdVendor Advisory
- cvs.php.net/viewcvs.cgi/php-src/ext/session/session.cnvd
- lists.suse.com/archive/suse-security-announce/2007-Mar/0003.htmlnvd
- securityreason.com/securityalert/2000nvd
- www.mandriva.com/security/advisoriesnvd
- www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.htmlnvd
- www.securityfocus.com/archive/1/453938/30/9270/threadednvd
News mentions
0No linked articles in our index yet.