CVE - CVE-2006-3017

CVE-ID
CVE-2006-3017	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BUGTRAQ:20060806 PHP: Zend_Hash_Del_Key_Or_Index Vulnerability URL:http://www.securityfocus.com/archive/1/442437/100/0/threaded BUGTRAQ:20061005 rPSA-2006-0182-1 php php-mysql php-pgsql URL:http://www.securityfocus.com/archive/1/447866/100/0/threaded FULLDISC:20060806 PHP: Zend_Hash_Del_Key_Or_Index Vulnerability URL:http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0166.html MISC:http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_vulnerability.html CONFIRM:http://www.php.net/release_5_1_3.php CONFIRM:http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&r1=1.87.4.8.2.1&r2=1.87.4.8.2.2 CONFIRM:http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&view=log CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm CONFIRM:https://issues.rpath.com/browse/RPL-683 DEBIAN:DSA-1206 URL:http://www.debian.org/security/2006/dsa-1206 MANDRIVA:MDKSA-2006:122 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 REDHAT:RHSA-2006:0568 URL:http://www.redhat.com/support/errata/RHSA-2006-0568.html REDHAT:RHSA-2006:0567 URL:http://www.redhat.com/support/errata/RHSA-2006-0567.html REDHAT:RHSA-2006:0549 URL:http://rhn.redhat.com/errata/RHSA-2006-0549.html SGI:20060701-01-U URL:ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U SUSE:SUSE-SA:2006:031 URL:http://www.novell.com/linux/security/advisories/2006_31_php.html SUSE:SUSE-SA:2006:034 URL:http://www.novell.com/linux/security/advisories/2006_34_php4.html TURBO:TLSA-2006-38 URL:http://www.turbolinux.com/security/2006/TLSA-2006-38.txt UBUNTU:USN-320-1 URL:https://usn.ubuntu.com/320-1/ BID:17843 URL:http://www.securityfocus.com/bid/17843 OSVDB:25255 URL:http://www.osvdb.org/25255 OSVDB:26466 URL:http://www.osvdb.org/26466 OVAL:oval:org.mitre.oval:def:10118 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10118 SECTRACK:1016306 URL:http://securitytracker.com/id?1016306 SECTRACK:1016649 URL:http://securitytracker.com/id?1016649 SECUNIA:19927 URL:http://secunia.com/advisories/19927 SECUNIA:21050 URL:http://secunia.com/advisories/21050 SECUNIA:21031 URL:http://secunia.com/advisories/21031 SECUNIA:21135 URL:http://secunia.com/advisories/21135 SECUNIA:21202 URL:http://secunia.com/advisories/21202 SECUNIA:21252 URL:http://secunia.com/advisories/21252 SECUNIA:21723 URL:http://secunia.com/advisories/21723 SECUNIA:22225 URL:http://secunia.com/advisories/22225 SECUNIA:22713 URL:http://secunia.com/advisories/22713 SECUNIA:21125 URL:http://secunia.com/advisories/21125 XF:php-zendhashdel-unspecified(27396) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/27396
Assigning CNA
N/A
Date Entry Created
20060614	Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20060614)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org

Use of the Common Vulnerabilities and Exposures (CVE®) List and the associated references from this website are subject to the terms of use. CVE is sponsored by US-CERT in the office of Cybersecurity and Communications at the U.S. Department of Homeland Security. Copyright © 1999–2018, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation. For more information, please contact us.