CVE-2006-3016

Public Exploit

Description

Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "certain characters in session names," including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and HTTP response splitting vulnerabilities. NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name().

9.3

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 6.32% Top 10%

Vendor Advisory redhat.com Vendor Advisory turbolinux.com Vendor Advisory redhat.com Vendor Advisory ubuntu.com Vendor Advisory mandriva.com Vendor Advisory sgi.com Vendor Advisory redhat.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com Vendor Advisory secunia.com

Affected: n/a n/a

References

Link	Tags
https://issues.rpath.com/browse/RPL-683
http://www.redhat.com/support/errata/RHSA-2006-0669.html	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10597	vdb entry signature
http://secunia.com/advisories/22487	third party advisory vendor advisory
http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm
http://www.turbolinux.com/security/2006/TLSA-2006-38.txt	vendor advisory
http://secunia.com/advisories/21050	third party advisory patch vendor advisory
http://secunia.com/advisories/23247	third party advisory vendor advisory
http://secunia.com/advisories/22004	third party advisory vendor advisory
http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm
http://www.redhat.com/support/errata/RHSA-2006-0682.html	vendor advisory
http://www.ubuntu.com/usn/usn-320-1	vendor advisory
http://www.php.net/release_5_1_3.php
http://secunia.com/advisories/22440	third party advisory vendor advisory
http://www.securityfocus.com/archive/1/447866/100/0/threaded	mailing list
http://secunia.com/advisories/22069	third party advisory vendor advisory
http://secunia.com/advisories/22225	third party advisory vendor advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:122	vendor advisory
http://www.osvdb.org/25253	vdb entry
http://secunia.com/advisories/19927	third party advisory patch vendor advisory
http://securitytracker.com/id?1016306	vdb entry
ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc	vendor advisory
http://www.securityfocus.com/bid/17843	exploit vdb entry patch
http://rhn.redhat.com/errata/RHSA-2006-0736.html	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2006-3016?: CVE-2006-3016 has been scored as a critical severity vulnerability.
How to fix CVE-2006-3016?: To fix CVE-2006-3016, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2006-3016 being actively exploited in the wild?: It is possible that CVE-2006-3016 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~6% probability that this vulnerability will be exploited by malicious actors in the next 30 days.