NVD脆弱性詳細

CVE-2006-4482

概要	Multiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext/standard/string.c in PHP before 5.1.5, when used on a 64-bit system, have unspecified impact and attack vectors, a different vulnerability than CVE-2006-1990.
公表日	2006年9月1日6:04
登録日	2021年1月29日15:44
最終更新日	2022年7月20日3:32

CVSS2.0 : HIGH
スコア	9.3
ベクター	AV:N/AC:M/Au:N/C:C/I:C/A:C
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高
全ての特権を取得	はい
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	いいえ

影響を受けるソフトウェアの構成

構成1		以上	以下	より上	未満
cpe:2.3:a:php:php::::::::					5.1.5

構成2	以上	以下	より上	未満
cpe:2.3:o:canonical:ubuntu_linux:5.04:::::::*
cpe:2.3:o:canonical:ubuntu_linux:5.10:::::::*
cpe:2.3:o:canonical:ubuntu_linux:6.06:::::::*

構成3		以上	以下	より上	未満
cpe:2.3:o:debian:debian_linux:3.1:::::::*

関連情報、対策とツール

No	URL	refsource	タグ
1	http://cvs.php.net/viewvc.cgi/php-src/ext/standard/string.c?r1=1.445.2.14.2.10&r2=1.445.2.14.2.11	MISC	Broken Link Patch
2	http://www.php.net/ChangeLog-5.php#5.1.5	CONFIRM	Release Notes Vendor Advisory
3	http://www.php.net/release_5_1_5.php	CONFIRM	Patch Release Notes Vendor Advisory
4	http://secunia.com/advisories/21546	SECUNIA	Not Applicable Patch Vendor Advisory
5	http://www.ubuntu.com/usn/usn-342-1	UBUNTU	Third Party Advisory
6	http://secunia.com/advisories/21768	SECUNIA	Not Applicable Vendor Advisory
7	http://www.redhat.com/support/errata/RHSA-2006-0669.html	REDHAT	Third Party Advisory
8	http://www.redhat.com/support/errata/RHSA-2006-0682.html	REDHAT	Third Party Advisory
9	http://www.novell.com/linux/security/advisories/2006_52_php.html	SUSE	Broken Link
10	http://secunia.com/advisories/22004	SECUNIA	Not Applicable Vendor Advisory
11	http://secunia.com/advisories/22069	SECUNIA	Not Applicable Vendor Advisory
12	http://securitytracker.com/id?1016984	SECTRACK	Broken Link Third Party Advisory VDB Entry
13	https://issues.rpath.com/browse/RPL-683	CONFIRM	Broken Link
14	http://secunia.com/advisories/22225	SECUNIA	Not Applicable Vendor Advisory
15	http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm	CONFIRM	Third Party Advisory
16	http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm	CONFIRM	Third Party Advisory
17	http://secunia.com/advisories/22440	SECUNIA	Not Applicable Vendor Advisory
18	http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm	CONFIRM	Third Party Advisory
19	http://rhn.redhat.com/errata/RHSA-2006-0688.html	REDHAT	Third Party Advisory
20	ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc	SGI	Broken Link
21	http://www.securityfocus.com/bid/19582	BID	Third Party Advisory VDB Entry
22	http://secunia.com/advisories/22538	SECUNIA	Not Applicable
23	http://secunia.com/advisories/22487	SECUNIA	Not Applicable
24	http://www.debian.org/security/2006/dsa-1206	DEBIAN	Third Party Advisory
25	http://secunia.com/advisories/22713	SECUNIA	Not Applicable
26	http://secunia.com/advisories/22039	SECUNIA	Not Applicable
27	http://www.turbolinux.com/security/2006/TLSA-2006-38.txt	TURBO	Broken Link
28	http://www.vupen.com/english/advisories/2006/3318	VUPEN	Permissions Required
29	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10121	OVAL	Third Party Advisory
30	http://www.securityfocus.com/archive/1/447866/100/0/threaded	BUGTRAQ	Third Party Advisory VDB Entry

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-787	境界外書き込み	https://cwe.mitre.org/data/definitions/787.html