RCE in Php

CVE-2006-0207

Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject arbitrary HTTP headers via a crafted Set-Cookie header, related to the (1) session extension (aka ext/session) and the (2) header function.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.042 (89.9th percentile) — read the EPSS interpretation.

Affected products

  • Php — versions 5.0, 5.0.0, 5.0.1
  • N/a — versions n/a

Weakness classification (CWE)

References

  • cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
  • cve@mitre.org (Patch, vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
  • cve@mitre.org (x_refsource_UBUNTU, vendor-advisory)
  • cve@mitre.org (vendor-advisory, x_refsource_SUSE)
  • cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
  • cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
  • cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
  • cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
  • cve@mitre.org (x_refsource_MISC, Vendor Advisory)
  • cve@mitre.org (vendor-advisory, Patch, x_refsource_GENTOO, Vendor Advisory)