Test Kennung:	1.3.6.1.4.1.25623.1.0.808675
Kategorie:	Web application abuses
Titel:	PHP Multiple Vulnerabilities - 05 - Aug16 (Linux)
Zusammenfassung:	PHP is prone to multiple vulnerabilities.
Beschreibung:	Summary: PHP is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - Improper validation of token extraction for table names, in the php_pgsql_meta_data function in pgsql.c in the PostgreSQL extension. - Integer overflow in the ftp_genlist function in ext/ftp/ftp.c - PHP does not ensure that pathnames lack %00 sequences. Vulnerability Impact: Successfully exploiting this issue allow remote attackers to cause a denial of service, to read or write to arbitrary files, also execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow. Affected Software/OS: PHP versions prior to 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 on Linux Solution: Update to PHP version 5.4.42, or 5.5.26, or 5.6.10, or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	BugTraq ID: 75291 BugTraq ID: 75292 BugTraq ID: 75244 Common Vulnerability Exposure (CVE) ID: CVE-2015-4644 http://www.securityfocus.com/bid/75292 Debian Security Information: DSA-3344 (Google Search) http://www.debian.org/security/2015/dsa-3344 https://security.gentoo.org/glsa/201606-10 http://openwall.com/lists/oss-security/2015/06/18/6 RedHat Security Advisories: RHSA-2015:1186 http://rhn.redhat.com/errata/RHSA-2015-1186.html RedHat Security Advisories: RHSA-2015:1187 http://rhn.redhat.com/errata/RHSA-2015-1187.html http://www.securitytracker.com/id/1032709 Common Vulnerability Exposure (CVE) ID: CVE-2015-4643 http://www.securityfocus.com/bid/75291 RedHat Security Advisories: RHSA-2015:1135 http://rhn.redhat.com/errata/RHSA-2015-1135.html RedHat Security Advisories: RHSA-2015:1218 http://rhn.redhat.com/errata/RHSA-2015-1218.html Common Vulnerability Exposure (CVE) ID: CVE-2015-4598 http://www.securityfocus.com/bid/75244 http://www.openwall.com/lists/oss-security/2015/06/16/12 RedHat Security Advisories: RHSA-2015:1219 http://rhn.redhat.com/errata/RHSA-2015-1219.html
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.