Test Kennung:	1.3.6.1.4.1.25623.1.0.56607
Kategorie:	Mandrake Local Security Checks
Titel:	Mandrake Security Advisory MDKSA-2006:035-1 (php)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to php announced via advisory MDKSA-2006:035-1. A flaw in the PHP gd extension in versions prior to 4.4.1 could allow a remote attacker to bypass safe_mode and open_basedir restrictions via unknown attack vectors. Update: A regression was introduced with the backported patch from PHP 4.4.1 that would prevent PHP from creating a new file with imagepng(), imagejpeg(), etc. Thanks to Tibor Pittich for bringing this to our attention. The updated packages have been patched to correct this issue. Affected: 10.2, Corporate 3.0, Multi Network Firewall 2.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. http://www.securityspace.com/smysecure/catid.html?in=MDKSA-2006:035-1 http://bugs.php.net/bug.php?id=35071 Risk factor : High CVSS Score: 7.5
Querverweis:	BugTraq ID: 16907 BugTraq ID: 15411 Common Vulnerability Exposure (CVE) ID: CVE-2005-3391 http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html http://www.securityfocus.com/bid/15411 http://www.securityfocus.com/bid/16907 Cert/CC Advisory: TA06-062A http://www.us-cert.gov/cas/techalerts/TA06-062A.html http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml HPdes Security Advisory: HPSBMA02159 http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 HPdes Security Advisory: SSRT061238 http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:035 http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html http://www.osvdb.org/20898 http://secunia.com/advisories/17371 http://secunia.com/advisories/17510 http://secunia.com/advisories/18054 http://secunia.com/advisories/18198 http://secunia.com/advisories/18763 http://secunia.com/advisories/19064 http://secunia.com/advisories/22691 http://securityreason.com/securityalert/525 SuSE Security Announcement: SUSE-SA:2005:069 (Google Search) http://www.securityfocus.com/archive/1/419504/100/0/threaded https://www.ubuntu.com/usn/usn-232-1/ http://www.vupen.com/english/advisories/2005/2254 http://www.vupen.com/english/advisories/2006/0791 http://www.vupen.com/english/advisories/2006/4320
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.