CVE-2006-3017

Severity

93%

Complexity

86%

Confidentiality

165%

zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations.

zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations.

CVSS 2.0 Base Score 9.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C).

Overview

Type

PHP

First reported 18 years ago

2006-06-14 23:02:00

Last updated 6 years ago

2018-10-30 16:25:00

Affected Software

PHP PHP 3.0

3.0

PHP PHP 3.0.1

3.0.1

PHP PHP 3.0.2

3.0.2

PHP PHP 3.0.3

3.0.3

PHP PHP 3.0.4

3.0.4

PHP PHP 3.0.5

3.0.5

PHP PHP 3.0.6

3.0.6

PHP PHP 3.0.7

3.0.7

PHP PHP 3.0.8

3.0.8

PHP PHP 3.0.9

3.0.9

PHP PHP 3.0.10

3.0.10

PHP PHP 3.0.11

3.0.11

PHP PHP 3.0.12

3.0.12

PHP PHP 3.0.13

3.0.13

PHP PHP 3.0.14

3.0.14

PHP PHP 3.0.15

3.0.15

PHP PHP 3.0.16

3.0.16

PHP PHP 3.0.17

3.0.17

PHP PHP 3.0.18

3.0.18

PHP 4.0.0

4.0

PHP PHP 4.0 Beta 1

4.0

PHP PHP 4.0 Beta 2

4.0

PHP PHP 4.0 Beta 3

4.0

PHP PHP 4.0 Beta 4

4.0

PHP PHP 4.0 Beta 4 Patch Level 1

4.0

PHP 4.0 Release Candidate 1

4.0

PHP 4.0 Release Candidate 2

4.0

PHP PHP 4.0.0

4.0.0

PHP PHP 4.0.1

4.0.1

PHP PHP 4.0.2

4.0.2

PHP PHP 4.0.3

4.0.3

PHP PHP 4.0.4

4.0.4

PHP PHP 4.0.5

4.0.5

PHP PHP 4.0.6

4.0.6

PHP PHP 4.0.7

4.0.7

PHP 4.0.7 Release Candidate 1

4.0.7

PHP 4.0.7 Release Candidate 2

4.0.7

PHP 4.0.7 Release Candidate 3

4.0.7

PHP PHP 4.1.0

4.1.0

PHP PHP 4.1.1

4.1.1

PHP PHP 4.1.2

4.1.2

PHP PHP 4.2.0

4.2.0

PHP PHP 4.2.1

4.2.1

PHP PHP 4.2.2

4.2.2

PHP PHP 4.2.3

4.2.3

PHP PHP 4.3.0

4.3.0

PHP PHP 4.3.1

4.3.1

PHP PHP 4.3.2

4.3.2

PHP PHP 4.3.3

4.3.3

PHP PHP 4.3.4

4.3.4

PHP PHP 4.3.5

4.3.5

PHP PHP 4.3.6

4.3.6

PHP PHP 4.3.7

4.3.7

PHP PHP 4.3.8

4.3.8

PHP PHP 4.3.9

4.3.9

PHP PHP 4.3.10

4.3.10

PHP PHP 4.3.11

4.3.11

PHP PHP 4.4.0

4.4.0

PHP PHP 4.4.1

4.4.1

PHP PHP

PHP PHP 5.0.0

5.0.0

PHP PHP 5.0.0 Beta1

5.0.0

PHP PHP 5.0.0 Beta2

5.0.0

PHP PHP 5.0.0 Beta3

5.0.0

PHP PHP 5.0.0 Beta4

5.0.0

PHP PHP 5.0.0 RC1

5.0.0

PHP PHP 5.0.0 RC2

5.0.0

PHP PHP 5.0.0 RC3

5.0.0

PHP PHP 5.0.1

5.0.1

PHP PHP 5.0.2

5.0.2

PHP PHP 5.0.3

5.0.3

PHP PHP 5.0.4

5.0.4

PHP PHP 5.0.5

5.0.5

PHP PHP 5.1.0

5.1.0

PHP PHP 5.1.1

5.1.1

PHP PHP 5.1.2

5.1.2

References

20060701-01-U

20060806 PHP: Zend_Hash_Del_Key_Or_Index Vulnerability

http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&r1=1.87.4.8.2.1&r2=1.87.4.8.2.2

http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&view=log

RHSA-2006:0549

19927

Vendor Advisory

21031

Vendor Advisory

21050

Vendor Advisory

21125

Vendor Advisory

21135

Vendor Advisory

21202

Vendor Advisory

21252

Vendor Advisory

21723

Vendor Advisory

22225

Vendor Advisory

22713

Vendor Advisory

1016306

1016649

http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm

DSA-1206

http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_vulnerability.html

MDKSA-2006:122

SUSE-SA:2006:031

SUSE-SA:2006:034

25255

26466

http://www.php.net/release_5_1_3.php

RHSA-2006:0567

RHSA-2006:0568

20060806 PHP: Zend_Hash_Del_Key_Or_Index Vulnerability

20061005 rPSA-2006-0182-1 php php-mysql php-pgsql

17843

TLSA-2006-38

php-zendhashdel-unspecified(27396)

https://issues.rpath.com/browse/RPL-683

oval:org.mitre.oval:def:10118

USN-320-1

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.