CVE-2006-1017

Publication date 7 March 2006

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Description

The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the (1) safe_mode or (2) open_basedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imap_open function, allow remote attackers to obtain access to an IMAP stream data structure and conduct unauthorized IMAP actions.

Status

Package Ubuntu Release Status
php-imap 9.10 karmic
Fixed 5.2.3-0ubuntu1
9.04 jaunty
Fixed 5.2.3-0ubuntu1
8.10 intrepid
Fixed 5.2.3-0ubuntu1
8.04 LTS hardy
Fixed 5.2.3-0ubuntu1
7.10 gutsy
Fixed 5.2.3-0ubuntu1
7.04 feisty Ignored end of life, was needed
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life

References

Other references