CVE-2006-4431: Zend Platform

High severity, CVSS 7.5. EPSS: 4.6% chance of exploitation in the next 30 days.

Multiple buffer overflows in the (a) Session Clustering Daemon and the (b) mod_cluster module in the Zend Platform 2.2.1 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a (1) empty or (2) crafted PHP session identifier (PHPSESSID).

Affected products

• Zend Zend Platform: up to and including 2.2.1a

Published 2006-08-29. Last modified 2026-06-16.