Test Kennung:	1.3.6.1.4.1.25623.1.0.59142
Kategorie:	Ubuntu Local Security Checks
Titel:	Ubuntu USN-455-1 (php5)
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: The remote host is missing an update to php5 announced via advisory USN-455-1. A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 6.10 Ubuntu 7.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. Details follow: Stefan Esser discovered multiple vulnerabilities in the Month of PHP bugs. For details, please visit the referenced security advisories. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: libapache2-mod-php5 5.1.2-1ubuntu3.7 php5-cgi 5.1.2-1ubuntu3.7 php5-cli 5.1.2-1ubuntu3.7 php5-sqlite 5.1.2-1ubuntu3.7 Ubuntu 6.10: libapache2-mod-php5 5.1.6-1ubuntu2.4 php5-cgi 5.1.6-1ubuntu2.4 php5-cli 5.1.6-1ubuntu2.4 php5-sqlite 5.1.6-1ubuntu2.4 Ubuntu 7.04: libapache2-mod-php5 5.2.1-0ubuntu1.1 php5-cgi 5.2.1-0ubuntu1.1 php5-cli 5.2.1-0ubuntu1.1 php5-sqlite 5.2.1-0ubuntu1.1 In general, a standard system upgrade is sufficient to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-455-1 Risk factor : High CVSS Score: 7.8
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1375 BugTraq ID: 22851 http://www.securityfocus.com/bid/22851 Debian Security Information: DSA-1283 (Google Search) http://www.debian.org/security/2007/dsa-1283 https://www.exploit-db.com/exploits/3424 http://security.gentoo.org/glsa/glsa-200703-21.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:187 http://www.php-security.org/MOPB/MOPB-14-2007.html http://www.osvdb.org/32780 http://secunia.com/advisories/24606 http://secunia.com/advisories/25056 http://secunia.com/advisories/25057 http://secunia.com/advisories/25062 http://secunia.com/advisories/26895 SuSE Security Announcement: SUSE-SA:2007:032 (Google Search) http://www.novell.com/linux/security/advisories/2007_32_php.html http://www.ubuntu.com/usn/usn-455-1 Common Vulnerability Exposure (CVE) ID: CVE-2007-1376 BugTraq ID: 22862 http://www.securityfocus.com/bid/22862 https://www.exploit-db.com/exploits/3426 https://www.exploit-db.com/exploits/3427 http://www.php-security.org/MOPB/MOPB-15-2007.html http://www.osvdb.org/32781 Common Vulnerability Exposure (CVE) ID: CVE-2007-1380 BugTraq ID: 22805 http://www.securityfocus.com/bid/22805 Debian Security Information: DSA-1282 (Google Search) http://www.debian.org/security/2007/dsa-1282 https://www.exploit-db.com/exploits/3413 HPdes Security Advisory: HPSBMA02215 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 HPdes Security Advisory: HPSBTU02232 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 HPdes Security Advisory: SSRT071423 HPdes Security Advisory: SSRT071429 http://www.php-security.org/MOPB/MOPB-10-2007.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10792 http://secunia.com/advisories/24514 http://secunia.com/advisories/25025 http://secunia.com/advisories/25423 http://secunia.com/advisories/25850 SuSE Security Announcement: SUSE-SA:2007:020 (Google Search) http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html http://www.vupen.com/english/advisories/2007/1991 http://www.vupen.com/english/advisories/2007/2374 Common Vulnerability Exposure (CVE) ID: CVE-2007-1484 http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html BugTraq ID: 22990 http://www.securityfocus.com/bid/22990 BugTraq ID: 25159 http://www.securityfocus.com/bid/25159 http://security.gentoo.org/glsa/glsa-200705-19.xml http://www.php-security.org/MOPB/MOPB-24-2007.html http://secunia.com/advisories/24542 http://secunia.com/advisories/25445 http://secunia.com/advisories/26235 http://www.vupen.com/english/advisories/2007/2732 Common Vulnerability Exposure (CVE) ID: CVE-2007-1521 BugTraq ID: 22968 http://www.securityfocus.com/bid/22968 http://www.php-security.org/MOPB/MOPB-22-2007.html http://secunia.com/advisories/24505 http://www.vupen.com/english/advisories/2007/0960 Common Vulnerability Exposure (CVE) ID: CVE-2007-1583 BugTraq ID: 23016 http://www.securityfocus.com/bid/23016 Bugtraq: 20070418 rPSA-2007-0073-1 php php-mysql php-pgsql (Google Search) http://www.securityfocus.com/archive/1/466166/100/0/threaded http://www.mandriva.com/security/advisories?name=MDKSA-2007:088 http://www.mandriva.com/security/advisories?name=MDKSA-2007:089 http://www.mandriva.com/security/advisories?name=MDKSA-2007:090 http://www.php-security.org/MOPB/MOPB-26-2007.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10245 http://www.redhat.com/support/errata/RHSA-2007-0153.html RedHat Security Advisories: RHSA-2007:0155 http://rhn.redhat.com/errata/RHSA-2007-0155.html http://www.redhat.com/support/errata/RHSA-2007-0162.html http://secunia.com/advisories/24909 http://secunia.com/advisories/24924 http://secunia.com/advisories/24945 http://secunia.com/advisories/24965 Common Vulnerability Exposure (CVE) ID: CVE-2007-1700 BugTraq ID: 23119 http://www.securityfocus.com/bid/23119 http://www.php-security.org/MOPB/MOPB-30-2007.html XForce ISS Database: php-session-extension-code-execution(33520) https://exchange.xforce.ibmcloud.com/vulnerabilities/33520 Common Vulnerability Exposure (CVE) ID: CVE-2007-1718 BugTraq ID: 23145 http://www.securityfocus.com/bid/23145 http://www.mandriva.com/security/advisories?name=MDKSA-2007:087 http://www.php-security.org/MOPB/MOPB-34-2007.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10951 http://www.securitytracker.com/id?1017946 XForce ISS Database: php-mailfunction-header-injection(33516) https://exchange.xforce.ibmcloud.com/vulnerabilities/33516 Common Vulnerability Exposure (CVE) ID: CVE-2007-1824 BugTraq ID: 23237 http://www.securityfocus.com/bid/23237 http://www.php-security.org/MOPB/MOPB-42-2007.html XForce ISS Database: php-phpstreamfiltercreate-bo(33729) https://exchange.xforce.ibmcloud.com/vulnerabilities/33729 Common Vulnerability Exposure (CVE) ID: CVE-2007-1887 BugTraq ID: 23235 http://www.securityfocus.com/bid/23235 https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00397.html http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml HPdes Security Advisory: HPSBUX02262 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 HPdes Security Advisory: SSRT071447 http://www.php-security.org/MOPB/MOPB-41-2007.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5348 http://secunia.com/advisories/27037 http://secunia.com/advisories/27102 http://secunia.com/advisories/27110 http://www.vupen.com/english/advisories/2007/2016 http://www.vupen.com/english/advisories/2007/3386 XForce ISS Database: php-sqlitedecodebinary-bo(33766) https://exchange.xforce.ibmcloud.com/vulnerabilities/33766 Common Vulnerability Exposure (CVE) ID: CVE-2007-1888 http://www.mandriva.com/security/advisories?name=MDKSA-2007:091 http://www.sqlite.org/cvstrac/rlog?f=sqlite/src/encode.c http://osvdb.org/39177 http://www.attrition.org/pipermail/vim/2007-April/001540.html XForce ISS Database: sqlite-sqlitedecodebinary-bo(38518) https://exchange.xforce.ibmcloud.com/vulnerabilities/38518 Common Vulnerability Exposure (CVE) ID: CVE-2007-1900 BugTraq ID: 23359 http://www.securityfocus.com/bid/23359 http://www.php-security.org/MOPB/PMOPB-45-2007.html http://www.osvdb.org/33962 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6067 http://secunia.com/advisories/24824 http://secunia.com/advisories/25535 http://secunia.com/advisories/26231 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.482863 http://www.trustix.org/errata/2007/0023/ XForce ISS Database: php-filtervalidateemail-header-injection(33510) https://exchange.xforce.ibmcloud.com/vulnerabilities/33510
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.