# CVEs published 2006-02-27

7 CVEs were published on February 27, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0249](https://cve.now/CVE-2003-0249.md): PHP treats unknown methods such as "PoSt" as a GET request, which could allow attackers to intended access restrictions if PHP is running on (no CVSS)
- [CVE-2003-0986](https://cve.now/CVE-2003-0986.md): Various routines for the ppc64 architecture on Linux kernel 2.6 prior to 2.6.2 and 2.4 prior to 2.4.24 do not use the copy\_from\_user functio (no CVSS)
- [CVE-2006-0903](https://cve.now/CVE-2006-0903.md): MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not prop (no CVSS)
- [CVE-2006-0736](https://cve.now/CVE-2006-0736.md): Stack-based buffer overflow in the pam\_micasa PAM authentication module in CASA on Novell Linux Desktop 9 and Open Enterprise Server 1 allow (no CVSS)
- [CVE-2006-0899](https://cve.now/CVE-2006-0899.md): Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include arbitrary files via (no CVSS)
- [CVE-2006-0900](https://cve.now/CVE-2006-0900.md): nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the Prot (no CVSS)
- [CVE-2006-0901](https://cve.now/CVE-2006-0901.md): Unspecified vulnerability in the hsfs filesystem in Solaris 8, 9, and 10 allows unspecified attackers to cause a denial of service (panic) o (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-02-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.