CVE ID:	CVE-2006-3017
Description:	zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations.
Test IDs:	1.3.6.1.4.1.25623.1.0.57567
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-3017 BugTraq ID: 17843 http://www.securityfocus.com/bid/17843 Bugtraq: 20060806 PHP: Zend_Hash_Del_Key_Or_Index Vulnerability (Google Search) http://www.securityfocus.com/archive/1/442437/100/0/threaded Bugtraq: 20061005 rPSA-2006-0182-1 php php-mysql php-pgsql (Google Search) http://www.securityfocus.com/archive/1/447866/100/0/threaded Debian Security Information: DSA-1206 (Google Search) http://www.debian.org/security/2006/dsa-1206 http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0166.html http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_vulnerability.html http://www.osvdb.org/25255 http://www.osvdb.org/26466 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10118 RedHat Security Advisories: RHSA-2006:0549 http://rhn.redhat.com/errata/RHSA-2006-0549.html RedHat Security Advisories: RHSA-2006:0567 http://www.redhat.com/support/errata/RHSA-2006-0567.html RedHat Security Advisories: RHSA-2006:0568 http://www.redhat.com/support/errata/RHSA-2006-0568.html http://securitytracker.com/id?1016306 http://securitytracker.com/id?1016649 http://secunia.com/advisories/19927 http://secunia.com/advisories/21031 http://secunia.com/advisories/21050 http://secunia.com/advisories/21125 http://secunia.com/advisories/21135 http://secunia.com/advisories/21202 http://secunia.com/advisories/21252 http://secunia.com/advisories/21723 http://secunia.com/advisories/22225 http://secunia.com/advisories/22713 SGI Security Advisory: 20060701-01-U ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U SuSE Security Announcement: SUSE-SA:2006:031 (Google Search) http://www.novell.com/linux/security/advisories/2006_31_php.html SuSE Security Announcement: SUSE-SA:2006:034 (Google Search) http://www.novell.com/linux/security/advisories/2006_34_php4.html TurboLinux Advisory: TLSA-2006-38 http://www.turbolinux.com/security/2006/TLSA-2006-38.txt https://usn.ubuntu.com/320-1/ XForce ISS Database: php-zendhashdel-unspecified(27396) https://exchange.xforce.ibmcloud.com/vulnerabilities/27396