CVE:CVE-2006-0869
CNNVD:CNNVD-200602-361
PHP Extension and Application Repository (PEAR) LiveUser 0.16.8及之前版本的liveuser.php中的"remember me"功能存在目录遍历漏洞。远程攻击者可以借助cookie的store_id值中的..来确定文件是否存在，还可能删除具有短路径名称的任意文件或读取任意文件。
solution:Upgrade pear pear_liveuser to a higher version than 0.3,0.5,0.5.1,0.6,0.6.1,0.7,0.8,0.8.1,0.9,0.10.0,0.11.0,0.11.1,0.12.0,0.13.0,0.13.1,0.13.2,0.13.3,0.14.0,0.15.0,0.15.1,0.16.0,0.16.1,0.16.2,0.16.3,0.16.4,0.16.5,0.16.6,0.16.7,0.16.8,and avoid the version 0.3,0.5,0.5.1,0.6,0.6.1,0.7,0.8,0.8.1,0.9,0.10.0,0.11.0,0.11.1,0.12.0,0.13.0,0.13.1,0.13.2,0.13.3,0.14.0,0.15.0,0.15.1,0.16.0,0.16.1,0.16.2,0.16.3,0.16.4,0.16.5,0.16.6,0.16.7,0.16.8