|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Red Hat Local Security Checks >> RHSA-2006-0568: php Vulnerability Assessment Details
|
RHSA-2006-0568: php |
||
Check for the version of the php packages Detailed Explanation for this Vulnerability Assessment Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A directory traversal vulnerability was found in PHP. Local users could bypass open_basedir restrictions permiting remote attackers to create files in arbitrary directories via the tempnam() function. (CVE-2006-1494) The wordwrap() PHP function did not properly check for integer overflow in the handling of the "break" parameter. A possible hacker who could control the string passed to the "break" parameter could cause a heap overflow. (CVE-2006-1990) A flaw was found in the zend_hash_del() PHP function. For PHP scripts that rely on the use of the unset() function, a remote attacker could force variable initialization to be bypassed. This would be a security issue particularly for installations that enable the "register_globals" setting. "register_globals" is disabled by default in Red Hat Enterprise Linux. (CVE-2006-3017) Users of PHP should upgrade to these updated packages, which contain backported patches that resolve these issues. Solution : http://rhn.redhat.com/errata/RHSA-2006-0568.html Network Security Threat Level: High Networks Security ID: Vulnerability Assessment Copyright: This script is Copyright (C) 2006 Tenable Network Security |
||
Cables, Connectors |
Handheld Cordless Car Vacuum: 14000PA High Power, Lightweight, Black
$36.79
Electric Vacuum Cleaner Air Duster Suction High Pressure for Computer Car Home
$9.97
Electric Mini Air Duster Blower Vacuum Cleaner for PC Computer Laptop Dust
$30.95
Electric Vacuum Cleaner Air Duster Suction High Pressure for Computer Car Home
$12.08
Mini Computer Vacuum USB Keyboard Cleaner PC Laptop Brush Dust Cleaning Kit US
$13.68
Electric Mini Cordless Air Duster Blower Vacuum Cleaner for Computer/CarCleaning
$17.58
Compressed Air Duster with Air Blower 100000RPM Vacuum Cleaner and Air Duster
$38.99
Portable Cordless Hand Held Vacuum Cleaner Wet Dry Car Auto Home Duster w/ Bag
$24.98
2-In-1 Air Duster & Vacuum 60000 RPM Rechargeable Auto Computer Keyboard USB
$26.95
KLIM Cool Laptop Cooler Fan, Portable Quiet Cooling Vacuum w/Display - BLUE LED
$15.95
|
||
No Discussions have been posted on this vulnerability. |