ID de Prueba:	1.3.6.1.4.1.25623.1.0.65144
Categoría:	SuSE Local Security Checks
Título:	SLES9: Security update for PHP4
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: php4-imap php4-readline php4-iconv php4-servlet apache2-mod_php4 php4-gd php4-sysvshm php4-pear php4-xslt php4-zlib php4-mcal php4-yp php4-wddx mod_php4 mod_php4-apache2 php4-ftp php4-swf php4-mime_magic php4-filepro php4-bcmath php4-exif php4-curl php4-sysvsem php4-mhash php4-fastcgi php4-sockets php4-shmop php4-unixODBC php4-mbstring php4-mysql php4-calendar php4 php4-domxml php4-devel mod_php4-servlet apache-mod_php4 php4-gettext php4-session php4-ldap php4-ctype mod_php4-core php4-recode php4-pgsql php4-dba php4-qtdom php4-gmp php4-bz2 php4-dbase php4-mcrypt php4-snmp For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015608 within the SuSE Enterprise Server 9 patch database at http://download.novell.com/patch/finder/ Solution: Please install the updates provided by SuSE. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2727 BugTraq ID: 23984 http://www.securityfocus.com/bid/23984 http://www.mandriva.com/security/advisories?name=MDKSA-2007:187 http://blog.php-security.org/archives/80-Watching-the-PHP-CVS.html http://www.fortheloot.com/public/mcrypt.patch http://osvdb.org/36087 http://secunia.com/advisories/26895 SuSE Security Announcement: SUSE-SR:2007:015 (Google Search) http://www.novell.com/linux/security/advisories/2007_15_sr.html Common Vulnerability Exposure (CVE) ID: CVE-2007-3472 BugTraq ID: 24651 http://www.securityfocus.com/bid/24651 Bugtraq: 20070907 FLEA-2007-0052-1 gd (Google Search) http://www.securityfocus.com/archive/1/478796/100/0/threaded http://fedoranews.org/updates/FEDORA-2007-205.shtml http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00311.html http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052854.html http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052848.html http://security.gentoo.org/glsa/glsa-200708-05.xml http://security.gentoo.org/glsa/glsa-200711-34.xml http://security.gentoo.org/glsa/glsa-200805-13.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:153 http://www.mandriva.com/security/advisories?name=MDKSA-2007:164 http://bugs.libgd.org/?do=details&task_id=89 http://www.secweb.se/en/advisories/gd-gdimagecreatetruecolor-integer-overflow/ http://osvdb.org/37745 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11067 http://www.redhat.com/support/errata/RHSA-2008-0146.html http://secunia.com/advisories/25855 http://secunia.com/advisories/25860 http://secunia.com/advisories/26272 http://secunia.com/advisories/26390 http://secunia.com/advisories/26415 http://secunia.com/advisories/26467 http://secunia.com/advisories/26663 http://secunia.com/advisories/26766 http://secunia.com/advisories/26856 http://secunia.com/advisories/29157 http://secunia.com/advisories/30168 http://secunia.com/advisories/42813 http://www.trustix.org/errata/2007/0024/ http://www.vupen.com/english/advisories/2007/2336 http://www.vupen.com/english/advisories/2011/0022 XForce ISS Database: gd-imagecreatetruecolor-code-execution(35108) https://exchange.xforce.ibmcloud.com/vulnerabilities/35108 Common Vulnerability Exposure (CVE) ID: CVE-2007-3475 http://www.libgd.org/ReleaseNote020035 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9728 Common Vulnerability Exposure (CVE) ID: CVE-2007-3476 Debian Security Information: DSA-1613 (Google Search) http://www.debian.org/security/2008/dsa-1613 http://osvdb.org/37741 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10348 http://secunia.com/advisories/31168 Common Vulnerability Exposure (CVE) ID: CVE-2007-3477 http://osvdb.org/42062 Common Vulnerability Exposure (CVE) ID: CVE-2007-3478 http://bugs.php.net/bug.php?id=40578 http://osvdb.org/37740 Common Vulnerability Exposure (CVE) ID: CVE-2007-3799 http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html BugTraq ID: 24268 http://www.securityfocus.com/bid/24268 Debian Security Information: DSA-1444 (Google Search) http://www.debian.org/security/2008/dsa-1444 Debian Security Information: DSA-1578 (Google Search) http://www.debian.org/security/2008/dsa-1578 https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.html http://www.php-security.org/MOPB/PMOPB-46-2007.html http://osvdb.org/36855 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9792 http://www.redhat.com/support/errata/RHSA-2007-0888.html RedHat Security Advisories: RHSA-2007:0889 http://rhn.redhat.com/errata/RHSA-2007-0889.html http://www.redhat.com/support/errata/RHSA-2007-0890.html http://www.redhat.com/support/errata/RHSA-2007-0891.html http://secunia.com/advisories/26871 http://secunia.com/advisories/26930 http://secunia.com/advisories/26967 http://secunia.com/advisories/27351 http://secunia.com/advisories/27377 http://secunia.com/advisories/27545 http://secunia.com/advisories/27864 http://secunia.com/advisories/28249 http://secunia.com/advisories/29420 http://secunia.com/advisories/30288 https://usn.ubuntu.com/549-1/ http://www.ubuntu.com/usn/usn-549-2 http://www.vupen.com/english/advisories/2008/0924/references
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.