CVE-2006-4483

The cURL extension files (1) ext/curl/interface.c and (2) ext/curl/streams.c in PHP before 5.1.5 permit the CURLOPT_FOLLOWLOCATION option when open_basedir or safe_mode is enabled, which allows attackers to perform unauthorized actions, possibly related to the realpath cache.

• CWE-862

• http://cvs.php.net/viewcvs.cgi/php-src/ext/curl/interface.c?r1=1.62.2.14.2.6&r2=1.62.2.14.2.7Broken Link, Patch
• http://cvs.php.net/viewcvs.cgi/php-src/ext/curl/interface.c?view=logBroken Link, Patch
• http://cvs.php.net/viewvc.cgi/php-src/ext/curl/streams.c?r1=1.14.2.2.2.3&r2=1.14.2.2.2.4Broken Link, Patch
• http://secunia.com/advisories/21546Not Applicable, Patch, Vendor Advisory
• http://secunia.com/advisories/22039Not Applicable
• http://secunia.com/advisories/30411Not Applicable
• http://securitytracker.com/id?1016984Broken Link, Third Party Advisory, VDB Entry
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0178Broken Link
• http://www.novell.com/linux/security/advisories/2006_52_php.htmlBroken Link
• http://www.php.net/ChangeLog-5.php#5.1.5Release Notes, Vendor Advisory
• http://www.php.net/release_5_1_5.phpPatch, Release Notes, Vendor Advisory
• http://www.securityfocus.com/archive/1/492671/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/19582Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2006/3318Permissions Required
• http://cvs.php.net/viewcvs.cgi/php-src/ext/curl/interface.c?r1=1.62.2.14.2.6&r2=1.62.2.14.2.7Broken Link, Patch
• http://cvs.php.net/viewcvs.cgi/php-src/ext/curl/interface.c?view=logBroken Link, Patch
• http://cvs.php.net/viewvc.cgi/php-src/ext/curl/streams.c?r1=1.14.2.2.2.3&r2=1.14.2.2.2.4Broken Link, Patch
• http://secunia.com/advisories/21546Not Applicable, Patch, Vendor Advisory
• http://secunia.com/advisories/22039Not Applicable
• http://secunia.com/advisories/30411Not Applicable
• http://securitytracker.com/id?1016984Broken Link, Third Party Advisory, VDB Entry
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0178Broken Link
• http://www.novell.com/linux/security/advisories/2006_52_php.htmlBroken Link
• http://www.php.net/ChangeLog-5.php#5.1.5Release Notes, Vendor Advisory
• http://www.php.net/release_5_1_5.phpPatch, Release Notes, Vendor Advisory
• http://www.securityfocus.com/archive/1/492671/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/19582Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2006/3318Permissions Required

Published

Aug 31, 2006

Last Modified

Jun 16, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-4477Multiple PHP remote file inclusion vulnerabilities in Visual…
• CVE-2006-4478SQL injection vulnerability in headeruserdata.php in Visual …
• CVE-2006-4479Cross-site scripting (XSS) vulnerability in loginreq2.php in…
• CVE-2006-4480Incomplete blacklist vulnerability in the nk_CSS function in…
• CVE-2006-4481The (1) file_exists and (2) imap_reopen functions in PHP bef…
• CVE-2006-4482Multiple heap-based buffer overflows in the (1) str_repeat a…
• CVE-2006-4484Buffer overflow in the LWZReadByte_ function in ext/gd/libgd…
• CVE-2006-4485The stripos function in PHP before 5.1.5 has unknown impact …
• CVE-2006-4486Integer overflow in memory allocation routines in PHP before…
• CVE-2006-4487DUware DUpoll 3.0 and 3.1 stores _private/Dupoll.mdb under t…
• CVE-2006-4488PHP remote file inclusion vulnerability in modules/userstop/…
• CVE-2006-4489Multiple PHP remote file inclusion vulnerabilities in MiniBi…