Search
Find a vulnerability
Search criteria
2 vulnerabilities found for pear_liveuser by pear
CVE-2006-0869 (GCVE-0-2006-0869)
Vulnerability from nvd – Published: 2006-02-23 23:00 – Updated: 2024-08-07 16:48
VLAI
EPSS
VEX
Summary
Directory traversal vulnerability in the "remember me" feature in liveuser.php in PHP Extension and Application Repository (PEAR) LiveUser 0.16.8 and earlier allows remote attackers to determine file existence, and possibly delete arbitrary files with short pathnames or possibly read arbitrary files, via a .. (dot dot) in the store_id value of a cookie.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://pear.php.net/package/LiveUser/download/ | x_refsource_CONFIRM |
| http://securitytracker.com/id?1015659 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/16761 | vdb-entryx_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/archive/1/425711/100… | mailing-listx_refsource_BUGTRAQ |
| http://securityreason.com/securityalert/466 | third-party-advisoryx_refsource_SREASON |
| http://www.vupen.com/english/advisories/2006/0697 | vdb-entryx_refsource_VUPEN |
| http://www.gulftech.org/?node=research&article_id… | x_refsource_MISC |
Date Public
2006-02-21 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:48:56.932Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://pear.php.net/package/LiveUser/download/"
},
{
"name": "1015659",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015659"
},
{
"name": "16761",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16761"
},
{
"name": "liveuser-liveuser-file-deletion(24853)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24853"
},
{
"name": "liveuser-liveuser-file-access(24852)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24852"
},
{
"name": "20060221 PEAR LiveUser File Access Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/425711/100/0/threaded"
},
{
"name": "466",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/466"
},
{
"name": "ADV-2006-0697",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0697"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.gulftech.org/?node=research\u0026article_id=00103-02212006"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-02-21T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Directory traversal vulnerability in the \"remember me\" feature in liveuser.php in PHP Extension and Application Repository (PEAR) LiveUser 0.16.8 and earlier allows remote attackers to determine file existence, and possibly delete arbitrary files with short pathnames or possibly read arbitrary files, via a .. (dot dot) in the store_id value of a cookie."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://pear.php.net/package/LiveUser/download/"
},
{
"name": "1015659",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015659"
},
{
"name": "16761",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16761"
},
{
"name": "liveuser-liveuser-file-deletion(24853)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24853"
},
{
"name": "liveuser-liveuser-file-access(24852)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24852"
},
{
"name": "20060221 PEAR LiveUser File Access Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/425711/100/0/threaded"
},
{
"name": "466",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/466"
},
{
"name": "ADV-2006-0697",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0697"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.gulftech.org/?node=research\u0026article_id=00103-02212006"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0869",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Directory traversal vulnerability in the \"remember me\" feature in liveuser.php in PHP Extension and Application Repository (PEAR) LiveUser 0.16.8 and earlier allows remote attackers to determine file existence, and possibly delete arbitrary files with short pathnames or possibly read arbitrary files, via a .. (dot dot) in the store_id value of a cookie."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://pear.php.net/package/LiveUser/download/",
"refsource": "CONFIRM",
"url": "http://pear.php.net/package/LiveUser/download/"
},
{
"name": "1015659",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015659"
},
{
"name": "16761",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16761"
},
{
"name": "liveuser-liveuser-file-deletion(24853)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24853"
},
{
"name": "liveuser-liveuser-file-access(24852)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24852"
},
{
"name": "20060221 PEAR LiveUser File Access Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/425711/100/0/threaded"
},
{
"name": "466",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/466"
},
{
"name": "ADV-2006-0697",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0697"
},
{
"name": "http://www.gulftech.org/?node=research\u0026article_id=00103-02212006",
"refsource": "MISC",
"url": "http://www.gulftech.org/?node=research\u0026article_id=00103-02212006"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0869",
"datePublished": "2006-02-23T23:00:00.000Z",
"dateReserved": "2006-02-23T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:48:56.932Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0869 (GCVE-0-2006-0869)
Vulnerability from cvelistv5 – Published: 2006-02-23 23:00 – Updated: 2024-08-07 16:48
VLAI
EPSS
VEX
Summary
Directory traversal vulnerability in the "remember me" feature in liveuser.php in PHP Extension and Application Repository (PEAR) LiveUser 0.16.8 and earlier allows remote attackers to determine file existence, and possibly delete arbitrary files with short pathnames or possibly read arbitrary files, via a .. (dot dot) in the store_id value of a cookie.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://pear.php.net/package/LiveUser/download/ | x_refsource_CONFIRM |
| http://securitytracker.com/id?1015659 | vdb-entryx_refsource_SECTRACK |
| http://www.securityfocus.com/bid/16761 | vdb-entryx_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/archive/1/425711/100… | mailing-listx_refsource_BUGTRAQ |
| http://securityreason.com/securityalert/466 | third-party-advisoryx_refsource_SREASON |
| http://www.vupen.com/english/advisories/2006/0697 | vdb-entryx_refsource_VUPEN |
| http://www.gulftech.org/?node=research&article_id… | x_refsource_MISC |
Date Public
2006-02-21 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:48:56.932Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://pear.php.net/package/LiveUser/download/"
},
{
"name": "1015659",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1015659"
},
{
"name": "16761",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16761"
},
{
"name": "liveuser-liveuser-file-deletion(24853)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24853"
},
{
"name": "liveuser-liveuser-file-access(24852)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24852"
},
{
"name": "20060221 PEAR LiveUser File Access Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/425711/100/0/threaded"
},
{
"name": "466",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/466"
},
{
"name": "ADV-2006-0697",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0697"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.gulftech.org/?node=research\u0026article_id=00103-02212006"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-02-21T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Directory traversal vulnerability in the \"remember me\" feature in liveuser.php in PHP Extension and Application Repository (PEAR) LiveUser 0.16.8 and earlier allows remote attackers to determine file existence, and possibly delete arbitrary files with short pathnames or possibly read arbitrary files, via a .. (dot dot) in the store_id value of a cookie."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-18T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://pear.php.net/package/LiveUser/download/"
},
{
"name": "1015659",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1015659"
},
{
"name": "16761",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16761"
},
{
"name": "liveuser-liveuser-file-deletion(24853)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24853"
},
{
"name": "liveuser-liveuser-file-access(24852)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24852"
},
{
"name": "20060221 PEAR LiveUser File Access Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/425711/100/0/threaded"
},
{
"name": "466",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/466"
},
{
"name": "ADV-2006-0697",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0697"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.gulftech.org/?node=research\u0026article_id=00103-02212006"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0869",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Directory traversal vulnerability in the \"remember me\" feature in liveuser.php in PHP Extension and Application Repository (PEAR) LiveUser 0.16.8 and earlier allows remote attackers to determine file existence, and possibly delete arbitrary files with short pathnames or possibly read arbitrary files, via a .. (dot dot) in the store_id value of a cookie."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://pear.php.net/package/LiveUser/download/",
"refsource": "CONFIRM",
"url": "http://pear.php.net/package/LiveUser/download/"
},
{
"name": "1015659",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1015659"
},
{
"name": "16761",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16761"
},
{
"name": "liveuser-liveuser-file-deletion(24853)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24853"
},
{
"name": "liveuser-liveuser-file-access(24852)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24852"
},
{
"name": "20060221 PEAR LiveUser File Access Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/425711/100/0/threaded"
},
{
"name": "466",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/466"
},
{
"name": "ADV-2006-0697",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0697"
},
{
"name": "http://www.gulftech.org/?node=research\u0026article_id=00103-02212006",
"refsource": "MISC",
"url": "http://www.gulftech.org/?node=research\u0026article_id=00103-02212006"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0869",
"datePublished": "2006-02-23T23:00:00.000Z",
"dateReserved": "2006-02-23T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:48:56.932Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}