{"id":"GHSA-76rh-xv36-9mrc","aliases":["CVE-2006-0868"],"title":"PEAR::Auth potential authentication bypass vulnerability","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"HIGH","description":"Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to \"falsify authentication credentials,\" related to the \"underlying storage containers.\"","severity":"high","score":null,"published":"2022-05-01T06:43:23.000Z","modified":"2024-12-05T05:26:48.018Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"pear/auth","sources":[{"name":"OSV · GHSA-76rh-xv36-9mrc","url":"https://osv.dev/vulnerability/GHSA-76rh-xv36-9mrc"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"1.2.4"}],"type":"ECOSYSTEM"}],"versions":["0.0.1-beta","0.0.2-beta","0.0.3"],"fixed":["1.2.4"]},{"ecosystem":"Packagist","name":"pear/auth","sources":[{"name":"OSV · GHSA-76rh-xv36-9mrc","url":"https://osv.dev/vulnerability/GHSA-76rh-xv36-9mrc"}],"ranges":[{"events":[{"introduced":"1.3.0r1"},{"fixed":"1.3.0r4"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["1.3.0r4"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2006-0868","https://exchange.xforce.ibmcloud.com/vulnerabilities/24854","https://github.com/pear/Auth","https://web.archive.org/web/20060315074736/http://securitytracker.com/alerts/2006/Feb/1015666.html","https://web.archive.org/web/20060408105851/http://www.securityfocus.com/bid/16758","https://web.archive.org/web/20201207144810/http://www.securityfocus.com/archive/1/425796/100/0/threaded","http://pear.php.net/package/Auth/download/1.2.4","http://pear.php.net/package/Auth/download/1.3.0r4","http://www.gentoo.org/security/en/glsa/glsa-200603-13.xml"],"sources":[{"name":"OSV","id":"GHSA-76rh-xv36-9mrc","modified":"2024-12-05T05:26:48.018821Z","url":"https://osv.dev/vulnerability/GHSA-76rh-xv36-9mrc"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T21:45:31.439Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}