Stack-based buffer overflow in PHP - CVE-2006-0097

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU110497

Stack-based buffer overflow in PHP - CVE-2006-0097

Published: October 19, 2018 / Updated: June 12, 2025


Vulnerability identifier: #VU110497
CSH Severity: Medium
CVSS v4.0:
CVE-ID: CVE-2006-0097
CWE-ID: CWE-121
Exploitation vector: Remote access
Exploit availability: Public exploit is available
Vendor: PHP Group
Affected software:
PHP

Detailed vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the create_named_pipe function in libmysql.c when processing a long (1) arg_host or (2) arg_unix_socket argument, as demonstrated by a long named pipe variable in the host argument to the mysql_connect function. A remote unauthenticated attacker can trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


How to mitigate CVE-2006-0097

Install update from vendor's website.

Sources