CVE-2006-4485
Advisory lineage Upstream: 0 Downstream: 1
Downstream
Modified
Published: 31 Aug 2006, 21:00
Last modified:07 Aug 2024, 19:14
Vulnerability Summary
Overall Risk (default)
high
70/100 CVSS Score
10 HIGH
v2.0 (nvd)
EPSS Score
1.75% LOW
2% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
31 Aug 2006, 21:00
Published
Vulnerability first disclosed
07 Aug 2024, 19:14
Last Modified
Vulnerability information updated
Description
The stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read.
CVSS Metrics
- v2.0•HIGH•Score: 10AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Trends
Current EPSS score: 1.75%• Percentile: 83%
Affected Systems
- Unknown•PHP
5.1.0 | 5.1.1 | 5.1.2 | 5.1.4
References (12)
- http://securitytracker.com/id?1016984
- http://www.php.net/release_5_1_5.php
- http://rhn.redhat.com/errata/RHSA-2006-0688.html
- http://www.ubuntu.com/usn/usn-362-1
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:162
- http://www.securityfocus.com/bid/19582
- http://secunia.com/advisories/22538
- http://secunia.com/advisories/21546
- http://www.vupen.com/english/advisories/2006/3318
- http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm
- http://secunia.com/advisories/22331
- http://secunia.com/advisories/21842