PHP cURL Encoded NULL Character Safe_Mode Restriction Bypass Vulnerability

Bugtraq ID:	18116
Class:	Input Validation Error
CVE:	CVE-2006-2563
Remote:	No
Local:	Yes
Published:	May 27 2006 12:00AM
Updated:	Sep 01 2006 04:48PM
Credit:	Maksymilian Arciemowicz (cXIb8O3) discovered this vulnerability.
Vulnerable:	Ubuntu Ubuntu Linux 5.10 sparc Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 PHP PHP 5.1.4 PHP PHP 4.4.2 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 Mandriva Linux Mandrake 10.2 x86_64 Mandriva Linux Mandrake 10.2 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0

Not Vulnerable: