CVE-2006-0202

Name: CVE-2006-0202
Creator: NVD / NIST
Published: 2006-01-13T23:03:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.34%

Last modified Jun 16, 2026

CVE-2006-0202 is a vulnerability of currently unknown severity. Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and possibly earlier has (1) world-readable permissions for ipn/logs/ipn_success.txt, which allows local users to view sensitive information (payment data), and (2) world-writable permissions for ipn/logs, which allows local users to delete or replace payment data.. EPSS estimates a 0.34% chance of exploitation in the next 30 days.

Description

Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and possibly earlier has (1) world-readable permissions for ipn/logs/ipn_success.txt, which allows local users to view sensitive information (payment data), and (2) world-writable permissions for ipn/logs, which allows local users to delete or replace payment data.

Metrics

EPSS Probability

0.34%

25.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Paypal	Php Toolkit	<= 0.50

References

http://secunia.com/advisories/18444Vendor Advisory
http://www.osvdb.org/22379
http://www.securityfocus.com/archive/1/421739Vendor Advisory
http://www.securityfocus.com/bid/16218
http://www.uinc.ru/articles/vuln/ptpaypal050.shtmlVendor Advisory
http://www.vupen.com/english/advisories/2006/0183
http://secunia.com/advisories/18444Vendor Advisory
http://www.osvdb.org/22379
http://www.securityfocus.com/archive/1/421739Vendor Advisory
http://www.securityfocus.com/bid/16218
http://www.uinc.ru/articles/vuln/ptpaypal050.shtmlVendor Advisory
http://www.vupen.com/english/advisories/2006/0183

Timeline

Published: Jan 13, 2006
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2006-0202?

How severe is CVE-2006-0202?

Severity scoring for CVE-2006-0202 is pending analysis. The EPSS model estimates a 0.34% probability of exploitation in the next 30 days.

How do I fix CVE-2006-0202?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2006-0202?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST