{"id":"CVE-2006-3017","published":"2006-06-14T23:00:00Z","modified":"2024-08-07T18:16:05Z","title":"zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete…","vendor":null,"product":null,"tier":"tail","description":{"text":"zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.04136,"percentile":0.90799,"provenance":"source"},"cwes":[],"references":[{"url":"http://secunia.com/advisories/21723","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://issues.rpath.com/browse/RPL-683","tags":["x_refsource_CONFIRM"]},{"url":"http://secunia.com/advisories/21252","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/21202","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&view=log","tags":["x_refsource_CONFIRM"]},{"url":"http://www.turbolinux.com/security/2006/TLSA-2006-38.txt","tags":["vendor-advisory","x_refsource_TURBO"]},{"url":"http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&r1=1.87.4.8.2.1&r2=1.87.4.8.2.2","tags":["x_refsource_CONFIRM"]},{"url":"http://www.debian.org/security/2006/dsa-1206","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://secunia.com/advisories/21050","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.novell.com/linux/security/advisories/2006_31_php.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://www.securityfocus.com/archive/1/442437/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.osvdb.org/26466","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"http://secunia.com/advisories/22713","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0568.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://secunia.com/advisories/21135","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.php.net/release_5_1_3.php","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/archive/1/447866/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://securitytracker.com/id?1016649","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0549.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://secunia.com/advisories/22225","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:122","tags":["vendor-advisory","x_refsource_MANDRIVA"]},{"url":"http://secunia.com/advisories/21125","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/19927","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.osvdb.org/25255","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27396","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://securitytracker.com/id?1016306","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://secunia.com/advisories/21031","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0567.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U","tags":["vendor-advisory","x_refsource_SGI"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10118","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_vulnerability.html","tags":["x_refsource_MISC"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm","tags":["x_refsource_CONFIRM"]},{"url":"https://usn.ubuntu.com/320-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0166.html","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"http://www.novell.com/linux/security/advisories/2006_34_php4.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://www.securityfocus.com/bid/17843","tags":["vdb-entry","x_refsource_BID"]}],"priority":{"score":18.2,"factors":[{"name":"EPSS percentile","points":18.16}]},"euvd":{"id":"EUVD-2006-3014","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2006-3017-family-cve-2006-3017","children":[{"from":"CVE-2006-3017","to":"CVE-2006-4466","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in Joomla!.","from":"CVE.org","in":"CVE-2006-4466"}]},{"from":"CVE-2006-3017","to":"CVE-2006-4467","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in Simple Machines Forum.","from":"CVE.org","in":"CVE-2006-4467"}]},{"from":"CVE-2006-3017","to":"CVE-2006-4548","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in e107.","from":"CVE.org","in":"CVE-2006-4548"}]},{"from":"CVE-2006-3017","to":"CVE-2006-4677","relation":"bypass","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"bypass","quote":"Another researcher noted, and CVE agrees, that the unset PHP function can be bypassed (CVE-2006-3017).","from":"CVE.org","in":"CVE-2006-4677"}]},{"from":"CVE-2006-3017","to":"CVE-2006-6289","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in wBB Lite.","from":"CVE.org","in":"CVE-2006-6289"}]},{"from":"CVE-2006-3017","to":"CVE-2006-6966","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in phpGraphy.","from":"CVE.org","in":"CVE-2006-6966"}]},{"from":"CVE-2006-3017","to":"CVE-2007-0233","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in WordPress.","from":"CVE.org","in":"CVE-2007-0233"}]},{"from":"CVE-2006-3017","to":"CVE-2007-5307","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in ELSEIF CMS.","from":"CVE.org","in":"CVE-2007-5307"}]},{"from":"CVE-2006-3017","to":"CVE-2007-5416","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in Drupal.","from":"CVE.org","in":"CVE-2007-5416"}]},{"from":"CVE-2006-3017","to":"CVE-2008-7210","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in AJChat.","from":"CVE.org","in":"CVE-2008-7210"}]}]}}