Test Kennung:	1.3.6.1.4.1.25623.1.0.802670
Kategorie:	Denial of Service
Titel:	PHP pdo_sql_parser.re 'PDO' extension DoS vulnerability (Windows)
Zusammenfassung:	PHP is prone to a denial of service vulnerability.
Beschreibung:	Summary: PHP is prone to a denial of service vulnerability. Vulnerability Insight: The flaw is due to an error in the PDO extension in pdo_sql_parser.re file, which fails to determine the end of the query string during parsing of prepared statements. Vulnerability Impact: Successful exploitation could allow remote attackers to cause a denial of service condition. Affected Software/OS: PHP version before 5.3.14 and 5.4.x before 5.4.4 on Windows Solution: Update to PHP Version 5.3.14 or 5.4.4 or later. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Querverweis:	BugTraq ID: 54777 Common Vulnerability Exposure (CVE) ID: CVE-2012-3450 Bugtraq: 20120610 [php<=5.4.3] Parsing Bug in PHP PDO prepared statements may lead to access violation (Google Search) http://seclists.org/bugtraq/2012/Jun/60 Debian Security Information: DSA-2527 (Google Search) http://www.debian.org/security/2012/dsa-2527 http://www.mandriva.com/security/advisories?name=MDVSA-2012:108 http://www.openwall.com/lists/oss-security/2012/08/02/3 http://www.openwall.com/lists/oss-security/2012/08/02/7 SuSE Security Announcement: SUSE-SU-2012:1033 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00021.html http://www.ubuntu.com/usn/USN-1569-1
Copyright	Copyright (C) 2012 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.