CVE-2006-1608

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-04-10 · updated 2026-06-16

Description

The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress.zlib:// URI.

Affected products

PHP: 4.0, 4.0-beta_4_patch1, 4.0-beta1, 4.0-beta2, 4.0-beta3, 4.0-beta4 (+59)

References

http://secunia.com/advisories/19599
http://secunia.com/advisories/19775
http://secunia.com/advisories/21125
http://securityreason.com/achievement_securityalert/37
http://securityreason.com/securityalert/678
http://securitytracker.com/id?1015882
http://us.php.net/releases/5_1_3.php
http://www.mandriva.com/security/advisories?name=MDKSA-2006:074
http://www.osvdb.org/24487
http://www.securityfocus.com/archive/1/430461/100/0/threaded
http://www.securityfocus.com/archive/1/440869/100/0/threaded
http://www.securityfocus.com/archive/1/441210/100/0/threaded

Get alerted when CVE-2006-1608 or the next vulnerability affects your stack