CVE-2006-1608

Publication date 10 April 2006

Last updated 17 July 2025


Ubuntu priority

Description

The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress.zlib:// URI.

Status

Package Ubuntu Release Status
php5 7.04 feisty
Fixed in 5.2.1-0ubuntu1.4
6.10 edgy
Fixed in 5.1.6-1ubuntu2.6
6.06 LTS dapper
Fixed in 5.1.2-1ubuntu3.9

References

Related Ubuntu Security Notices (USN)

Other references


Access our resources on patching vulnerabilities