CVE-2006-5706

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-11-04 · updated 2026-06-16

Description

Unspecified vulnerabilities in PHP, probably before 5.2.0, allow local users to bypass open_basedir restrictions and perform unspecified actions via unspecified vectors involving the (1) chdir and (2) tempnam functions. NOTE: the tempnam vector might overlap CVE-2006-1494.

Affected products

PHP: through 5.1.6; 5.0-rc1, 5.0-rc2, 5.0-rc3, 5.0.0, 5.0.1, 5.0.2 (+9)

References

http://www.php.net/releases/5_2_0.php
http://www.ubuntu.com/usn/usn-375-1
http://www.php.net/releases/5_2_0.php
http://www.ubuntu.com/usn/usn-375-1

Get alerted when CVE-2006-5706 or the next vulnerability affects your stack