Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.57462
Kategorie:FreeBSD Local Security Checks
Titel:FreeBSD Ports: php4, php5
Zusammenfassung:The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:Summary:
The remote host is missing an update to the system
as announced in the referenced advisory.

Vulnerability Insight:
The following packages are affected:

php4 php5 php-suhosin php4-cli php5-cli php4-cgi php5-cgi
php4-dtc php5-dtc php4-horde php5-horde php4-nms php5-nms
mod_php4 mod_php5

Solution:
Update your system with the appropriate patches or
software upgrades.

CVSS Score:
6.2

CVSS Vector:
AV:L/AC:H/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2006-5178
BugTraq ID: 20326
http://www.securityfocus.com/bid/20326
Bugtraq: 20061003 Advisory 08/2006: PHP open_basedir Race Condition Vulnerability (Google Search)
http://www.securityfocus.com/archive/1/447649/100/0/threaded
Bugtraq: 20061009 PHP open_basedir with symlink() function Race Condition PoC exploit (Google Search)
http://www.securityfocus.com/archive/1/448020/100/0/threaded
http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049850.html
http://www.mandriva.com/security/advisories?name=MDKSA-2006:185
http://www.hardened-php.net/advisory_082006.132.html
http://www.neosecurityteam.net/index.php?action=advisories&id=26
http://www.securityfocus.com/archive/1/448953/100/0/threaded
http://securitytracker.com/id?1016977
http://secunia.com/advisories/22235
http://secunia.com/advisories/22424
http://securityreason.com/securityalert/1692
TurboLinux Advisory: TLSA-2006-38
http://www.turbolinux.com/security/2006/TLSA-2006-38.txt
http://www.vupen.com/english/advisories/2006/3901
XForce ISS Database: php-openbasedir-security-bypass(29340)
https://exchange.xforce.ibmcloud.com/vulnerabilities/29340
CopyrightCopyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.