CVE-2006-2660

CVE-2006-2660 describes a buffer consumption vulnerability in the tempnam function within PHP versions 5.1.4 and 4.x prior to 4.4.3. This flaw allows local attackers to bypass restrictions and create PHP files with predictable names in arbitrary directories by supplying a pathname argument exceeding MAXPATHLEN, preventing the addition of a unique string. The vulnerability has a low severity CVSS score of 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N), indicating local access, low attack complexity, no authentication required, and only a partial impact on integrity. There is no evidence of active exploitation, no publicly available exploit code in Metasploit or ExploitDB, and minimal community discussion or media coverage surrounding this CVE.