Test Kennung:	1.3.6.1.4.1.25623.1.0.800393
Kategorie:	Denial of Service
Titel:	PHP DoS Vulnerability (Apr 2009)
Zusammenfassung:	PHP is prone to a denial of service (DoS) vulnerability.
Beschreibung:	Summary: PHP is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Improper handling of .zip file while doing extraction via php_zip_make_relative_path function in php_zip.c file. Vulnerability Impact: Successful exploitation could result in denial of service condition. Affected Software/OS: PHP version prior to 5.2.9 Solution: Update to version 5.2.9 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1272 http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html HPdes Security Advisory: HPSBMA02447 http://marc.info/?l=bugtraq&m=125017764422557&w=2 HPdes Security Advisory: SSRT090062 http://cvs.php.net/viewvc.cgi/php-src/ext/zip/php_zip.c?r1=1.1.2.48&r2=1.1.2.49 http://www.openwall.com/lists/oss-security/2009/04/01/9 http://www.openwall.com/lists/oss-security/2009/04/09/1 http://secunia.com/advisories/35685 http://secunia.com/advisories/36701 SuSE Security Announcement: SUSE-SR:2009:012 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
Copyright	Copyright (C) 2009 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.