Test Kennung:	1.3.6.1.4.1.25623.1.0.65172
Kategorie:	SuSE Local Security Checks
Titel:	SLES9: Security update for PHP4
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: php4-bcmath php4-sysvshm php4-gmp php4-pgsql php4-xslt php4-curl mod_php4-servlet php4-ftp php4-sockets php4-dbase php4 php4-mbstring php4-sysvsem php4-shmop php4-domxml php4-iconv mod_php4-core php4-swf mod_php4 php4-ldap php4-yp php4-unixODBC php4-wddx php4-ctype php4-recode php4-mysql php4-gettext php4-dba php4-gd php4-servlet php4-devel php4-qtdom php4-fastcgi php4-imap php4-exif php4-calendar apache-mod_php4 php4-mcrypt php4-zlib mod_php4-apache2 php4-filepro php4-mhash php4-mcal php4-session php4-readline php4-bz2 php4-pear php4-mime_magic php4-snmp apache2-mod_php4 For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5012110 within the SuSE Enterprise Server 9 patch database at http://download.novell.com/patch/finder/ Solution: Please install the updates provided by SuSE. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1285 BugTraq ID: 22764 http://www.securityfocus.com/bid/22764 Bugtraq: 20070418 rPSA-2007-0073-1 php php-mysql php-pgsql (Google Search) http://www.securityfocus.com/archive/1/466166/100/0/threaded http://security.gentoo.org/glsa/glsa-200705-19.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:087 http://www.mandriva.com/security/advisories?name=MDKSA-2007:088 http://www.mandriva.com/security/advisories?name=MDKSA-2007:089 http://www.mandriva.com/security/advisories?name=MDKSA-2007:090 http://www.php-security.org/MOPB/MOPB-03-2007.html http://www.osvdb.org/32769 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11017 http://www.redhat.com/support/errata/RHSA-2007-0082.html RedHat Security Advisories: RHSA-2007:0154 http://rhn.redhat.com/errata/RHSA-2007-0154.html RedHat Security Advisories: RHSA-2007:0155 http://rhn.redhat.com/errata/RHSA-2007-0155.html http://www.redhat.com/support/errata/RHSA-2007-0162.html RedHat Security Advisories: RHSA-2007:0163 http://rhn.redhat.com/errata/RHSA-2007-0163.html http://www.securitytracker.com/id?1017771 http://secunia.com/advisories/24909 http://secunia.com/advisories/24910 http://secunia.com/advisories/24924 http://secunia.com/advisories/24941 http://secunia.com/advisories/24945 http://secunia.com/advisories/25445 http://secunia.com/advisories/26048 http://secunia.com/advisories/26642 http://secunia.com/advisories/27864 http://secunia.com/advisories/28936 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136 SuSE Security Announcement: SUSE-SA:2007:044 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html https://usn.ubuntu.com/549-1/ http://www.ubuntu.com/usn/usn-549-2 Common Vulnerability Exposure (CVE) ID: CVE-2007-3007 BugTraq ID: 24259 http://www.securityfocus.com/bid/24259 https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00397.html http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml http://osvdb.org/36084 http://secunia.com/advisories/25456 http://secunia.com/advisories/26231 http://secunia.com/advisories/27102 http://secunia.com/advisories/27110 http://www.trustix.org/errata/2007/0023/ Common Vulnerability Exposure (CVE) ID: CVE-2007-2756 BugTraq ID: 24089 http://www.securityfocus.com/bid/24089 https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.html http://security.gentoo.org/glsa/glsa-200708-05.xml http://security.gentoo.org/glsa/glsa-200711-34.xml http://security.gentoo.org/glsa/glsa-200805-13.xml HPdes Security Advisory: HPSBUX02262 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 HPdes Security Advisory: SSRT071447 http://www.mandriva.com/security/advisories?name=MDKSA-2007:122 http://www.mandriva.com/security/advisories?name=MDKSA-2007:123 http://www.mandriva.com/security/advisories?name=MDKSA-2007:124 http://www.mandriva.com/security/advisories?name=MDKSA-2007:187 http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.020.html http://osvdb.org/35788 http://osvdb.org/36643 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10779 RedHat Security Advisories: RHSA-2007:0889 http://rhn.redhat.com/errata/RHSA-2007-0889.html http://www.redhat.com/support/errata/RHSA-2007-0890.html http://www.redhat.com/support/errata/RHSA-2007-0891.html http://www.redhat.com/support/errata/RHSA-2008-0146.html http://www.securitytracker.com/id?1018187 http://secunia.com/advisories/25353 http://secunia.com/advisories/25362 http://secunia.com/advisories/25378 http://secunia.com/advisories/25535 http://secunia.com/advisories/25575 http://secunia.com/advisories/25590 http://secunia.com/advisories/25646 http://secunia.com/advisories/25657 http://secunia.com/advisories/25658 http://secunia.com/advisories/25787 http://secunia.com/advisories/25855 http://secunia.com/advisories/26390 http://secunia.com/advisories/26871 http://secunia.com/advisories/26895 http://secunia.com/advisories/26930 http://secunia.com/advisories/26967 http://secunia.com/advisories/27037 http://secunia.com/advisories/27545 http://secunia.com/advisories/29157 http://secunia.com/advisories/30168 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.482863 SuSE Security Announcement: SUSE-SR:2007:013 (Google Search) http://www.novell.com/linux/security/advisories/2007_13_sr.html http://www.trustix.org/errata/2007/0019/ http://www.ubuntu.com/usn/usn-473-1 http://www.vupen.com/english/advisories/2007/1904 http://www.vupen.com/english/advisories/2007/1905 http://www.vupen.com/english/advisories/2007/2016 http://www.vupen.com/english/advisories/2007/2336 http://www.vupen.com/english/advisories/2007/3386 XForce ISS Database: gd-gdpngreaddata-dos(34420) https://exchange.xforce.ibmcloud.com/vulnerabilities/34420 Common Vulnerability Exposure (CVE) ID: CVE-2007-2872 BugTraq ID: 24261 http://www.securityfocus.com/bid/24261 Bugtraq: 20070601 SEC Consult SA-20070601-0 :: PHP chunk_split() integer overflow (Google Search) http://www.securityfocus.com/archive/1/470244/100/0/threaded HPdes Security Advisory: HPSBUX02308 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501 HPdes Security Advisory: HPSBUX02332 http://www.securityfocus.com/archive/1/491693/100/0/threaded HPdes Security Advisory: SSRT080010 HPdes Security Advisory: SSRT080056 http://www.sec-consult.com/291.html http://osvdb.org/36083 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9424 http://www.redhat.com/support/errata/RHSA-2007-0888.html http://www.securitytracker.com/id?1018186 http://secunia.com/advisories/26838 http://secunia.com/advisories/27351 http://secunia.com/advisories/27377 http://secunia.com/advisories/28318 http://secunia.com/advisories/28658 http://secunia.com/advisories/28750 http://secunia.com/advisories/30040 SuSE Security Announcement: SUSE-SA:2008:004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html http://www.vupen.com/english/advisories/2007/2061 http://www.vupen.com/english/advisories/2008/0059 http://www.vupen.com/english/advisories/2008/0398 XForce ISS Database: php-chunksplit-security-bypass(39398) https://exchange.xforce.ibmcloud.com/vulnerabilities/39398 Common Vulnerability Exposure (CVE) ID: CVE-2007-1396 BugTraq ID: 22886 http://www.securityfocus.com/bid/22886 Bugtraq: 20070308 PHP import_request_variables() arbitrary variable overwrite (Google Search) http://www.securityfocus.com/archive/1/462263/100/0/threaded Bugtraq: 20070312 Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite (Google Search) http://www.securityfocus.com/archive/1/462457/100/0/threaded http://www.securityfocus.com/archive/1/462658/100/0/threaded Bugtraq: 20070314 Re: Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite (Google Search) http://www.securityfocus.com/archive/1/462800/100/0/threaded http://securityreason.com/securityalert/2406 Common Vulnerability Exposure (CVE) ID: CVE-2007-1864 BugTraq ID: 23813 http://www.securityfocus.com/bid/23813 Debian Security Information: DSA-1330 (Google Search) http://www.debian.org/security/2007/dsa-1330 Debian Security Information: DSA-1331 (Google Search) http://www.debian.org/security/2007/dsa-1331 http://www.mandriva.com/security/advisories?name=MDKSA-2007:102 http://www.mandriva.com/security/advisories?name=MDKSA-2007:103 http://osvdb.org/34674 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11257 RedHat Security Advisories: RHSA-2007:0348 https://rhn.redhat.com/errata/RHSA-2007-0348.html http://www.redhat.com/support/errata/RHSA-2007-0349.html http://www.redhat.com/support/errata/RHSA-2007-0355.html http://www.securitytracker.com/id?1018024 http://secunia.com/advisories/25187 http://secunia.com/advisories/25191 http://secunia.com/advisories/25255 http://secunia.com/advisories/25660 http://secunia.com/advisories/25938 http://secunia.com/advisories/25945 http://secunia.com/advisories/26102 http://www.trustix.org/errata/2007/0017/ http://www.ubuntu.com/usn/usn-485-1 http://www.vupen.com/english/advisories/2007/2187 Common Vulnerability Exposure (CVE) ID: CVE-2007-2509 BugTraq ID: 23818 http://www.securityfocus.com/bid/23818 Bugtraq: 20070323 CRLF injection in PHP ftp function (Google Search) http://www.securityfocus.com/archive/1/463596/100/0/threaded Debian Security Information: DSA-1295 (Google Search) http://www.debian.org/security/2007/dsa-1295 Debian Security Information: DSA-1296 (Google Search) http://www.debian.org/security/2007/dsa-1296 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10839 http://www.securitytracker.com/id?1018022 http://secunia.com/advisories/25318 http://secunia.com/advisories/25365 http://secunia.com/advisories/25372 http://securityreason.com/securityalert/2672 http://www.ubuntu.com/usn/usn-462-1 XForce ISS Database: php-ftpputcmd-crlf-injection(34413) https://exchange.xforce.ibmcloud.com/vulnerabilities/34413
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.