CVEvulnerability
CVE-2006-0869
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-02-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
Description
Directory traversal vulnerability in the "remember me" feature in liveuser.php in PHP Extension and Application Repository (PEAR) LiveUser 0.16.8 and earlier allows remote attackers to determine file existence, and possibly delete arbitrary files with short pathnames or possibly read arbitrary files, via a .. (dot dot) in the store_id value of a cookie.
Affected configurations
• pear pear liveuser 0.3
• pear pear liveuser 0.5
• pear pear liveuser 0.5.1
• pear pear liveuser 0.6
• pear pear liveuser 0.6.1
• pear pear liveuser 0.7
• pear pear liveuser 0.8
• pear pear liveuser 0.8.1
• pear pear liveuser 0.9
• pear pear liveuser 0.10.0
• pear pear liveuser 0.11.0
• pear pear liveuser 0.11.1
• pear pear liveuser 0.12.0
• pear pear liveuser 0.13.0
• pear pear liveuser 0.13.1
• pear pear liveuser 0.13.2
• pear pear liveuser 0.13.3
• pear pear liveuser 0.14.0
• pear pear liveuser 0.15.0
• pear pear liveuser 0.15.1
• pear pear liveuser 0.16.0
• pear pear liveuser 0.16.1
• pear pear liveuser 0.16.2
• pear pear liveuser 0.16.3
• pear pear liveuser 0.16.4
• pear pear liveuser 0.16.5
• pear pear liveuser 0.16.6
• pear pear liveuser 0.16.7
• pear pear liveuser 0.16.8
References
- http://pear.php.net/package/LiveUser/download/ Patch
- http://securityreason.com/securityalert/466 securityreason.com
- http://securitytracker.com/id?1015659 Patch
- http://www.gulftech.org/?node=research&article_id=00103-02212006 Vendor Advisory
- http://www.securityfocus.com/archive/1/425711/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16761 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0697 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24852 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24853 exchange.xforce.ibmcloud.com
- http://pear.php.net/package/LiveUser/download/ Patch
- http://securityreason.com/securityalert/466 securityreason.com
- http://securitytracker.com/id?1015659 Patch
- http://www.gulftech.org/?node=research&article_id=00103-02212006 Vendor Advisory
- http://www.securityfocus.com/archive/1/425711/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16761 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0697 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24852 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24853 exchange.xforce.ibmcloud.com