ID de Prueba:	1.3.6.1.4.1.25623.1.0.58159
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 200703-21 (php)
Resumen:	The remote host is missing updates announced in;advisory GLSA 200703-21.
Descripción:	Summary: The remote host is missing updates announced in advisory GLSA 200703-21. Vulnerability Insight: PHP contains several vulnerabilities including a heap buffer overflow, potentially leading to the remote execution of arbitrary code under certain conditions. Solution: All PHP users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose 'dev-lang/php' CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-5465 http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html BugTraq ID: 20879 http://www.securityfocus.com/bid/20879 Bugtraq: 20061102 Advisory 13/2006: PHP HTML Entity Encoder Heap Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/450431/100/0/threaded Bugtraq: 20061109 rPSA-2006-0205-1 php php-mysql php-pgsql (Google Search) http://www.securityfocus.com/archive/1/451098/100/0/threaded Bugtraq: 20061129 SYM06-023, Symantec NetBackup PureDisk: PHP update to Address Reported Security Vulnerability (Google Search) http://www.securityfocus.com/archive/1/453024/100/0/threaded Cert/CC Advisory: TA06-333A http://www.us-cert.gov/cas/techalerts/TA06-333A.html Cisco Security Advisory: 20070425 Cisco Applied Intelligence Response: Identifying and Mitigating Exploitation of the PHP HTML Entity Encoder Heap Overflow Vulnerability in Multiple Web-Based Management Interfaces http://www.cisco.com/warp/public/707/cisco-air-20070425-http.shtml Cisco Security Advisory: 20070425 PHP HTML Entity Encoder Heap Overflow Vulnerability in Multiple Web-Based Management Interfaces http://www.cisco.com/en/US/products/products_security_response09186a008082c4fe.html Debian Security Information: DSA-1206 (Google Search) http://www.debian.org/security/2006/dsa-1206 http://security.gentoo.org/glsa/glsa-200703-21.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:196 http://www.hardened-php.net/advisory_132006.138.html http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.028.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10240 http://www.redhat.com/support/errata/RHSA-2006-0730.html http://www.redhat.com/support/errata/RHSA-2006-0731.html RedHat Security Advisories: RHSA-2006:0736 http://rhn.redhat.com/errata/RHSA-2006-0736.html http://securitytracker.com/id?1017152 http://securitytracker.com/id?1017296 http://secunia.com/advisories/22653 http://secunia.com/advisories/22685 http://secunia.com/advisories/22688 http://secunia.com/advisories/22693 http://secunia.com/advisories/22713 http://secunia.com/advisories/22753 http://secunia.com/advisories/22759 http://secunia.com/advisories/22779 http://secunia.com/advisories/22881 http://secunia.com/advisories/22929 http://secunia.com/advisories/23139 http://secunia.com/advisories/23155 http://secunia.com/advisories/23247 http://secunia.com/advisories/24606 http://secunia.com/advisories/25047 SGI Security Advisory: 20061101-01-P ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P SuSE Security Announcement: SUSE-SA:2006:067 (Google Search) http://www.novell.com/linux/security/advisories/2006_67_php.html http://www.trustix.org/errata/2006/0061/ TurboLinux Advisory: TLSA-2006-38 http://www.turbolinux.com/security/2006/TLSA-2006-38.txt http://www.ubuntu.com/usn/usn-375-1 http://www.vupen.com/english/advisories/2006/4317 http://www.vupen.com/english/advisories/2006/4749 http://www.vupen.com/english/advisories/2006/4750 http://www.vupen.com/english/advisories/2007/1546 XForce ISS Database: php-htmlentities-bo(29971) https://exchange.xforce.ibmcloud.com/vulnerabilities/29971 Common Vulnerability Exposure (CVE) ID: CVE-2007-0906 BugTraq ID: 22496 http://www.securityfocus.com/bid/22496 Bugtraq: 20070227 rPSA-2007-0043-1 php php-mysql php-pgsql (Google Search) http://www.securityfocus.com/archive/1/461462/100/0/threaded Bugtraq: 20070418 rPSA-2007-0073-1 php php-mysql php-pgsql (Google Search) http://www.securityfocus.com/archive/1/466166/100/0/threaded Debian Security Information: DSA-1264 (Google Search) http://www.us.debian.org/security/2007/dsa-1264 http://www.mandriva.com/security/advisories?name=MDKSA-2007:048 http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html http://www.osvdb.org/32776 http://osvdb.org/34706 http://osvdb.org/34707 http://osvdb.org/34708 http://osvdb.org/34709 http://osvdb.org/34710 http://osvdb.org/34711 http://osvdb.org/34712 http://osvdb.org/34713 http://osvdb.org/34714 http://osvdb.org/34715 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8992 http://www.redhat.com/support/errata/RHSA-2007-0076.html http://www.redhat.com/support/errata/RHSA-2007-0081.html http://www.redhat.com/support/errata/RHSA-2007-0082.html http://www.redhat.com/support/errata/RHSA-2007-0088.html RedHat Security Advisories: RHSA-2007:0089 http://rhn.redhat.com/errata/RHSA-2007-0089.html http://www.securitytracker.com/id?1017671 http://secunia.com/advisories/24089 http://secunia.com/advisories/24195 http://secunia.com/advisories/24217 http://secunia.com/advisories/24236 http://secunia.com/advisories/24248 http://secunia.com/advisories/24284 http://secunia.com/advisories/24295 http://secunia.com/advisories/24322 http://secunia.com/advisories/24419 http://secunia.com/advisories/24421 http://secunia.com/advisories/24432 http://secunia.com/advisories/24514 http://secunia.com/advisories/24642 http://secunia.com/advisories/24945 http://secunia.com/advisories/26048 SGI Security Advisory: 20070201-01-P ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc SuSE Security Announcement: SUSE-SA:2007:020 (Google Search) http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html SuSE Security Announcement: SUSE-SA:2007:044 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html http://www.trustix.org/errata/2007/0009/ http://www.ubuntu.com/usn/usn-424-1 http://www.ubuntu.com/usn/usn-424-2 http://www.vupen.com/english/advisories/2007/0546 Common Vulnerability Exposure (CVE) ID: CVE-2007-0907 http://osvdb.org/32767 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11321 Common Vulnerability Exposure (CVE) ID: CVE-2007-0908 BugTraq ID: 22806 http://www.securityfocus.com/bid/22806 http://www.php-security.org/MOPB/MOPB-11-2007.html http://osvdb.org/32766 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11185 http://securityreason.com/securityalert/2321 XForce ISS Database: php-wddx-information-disclosure(32493) https://exchange.xforce.ibmcloud.com/vulnerabilities/32493 Common Vulnerability Exposure (CVE) ID: CVE-2007-0909 http://osvdb.org/32764 http://osvdb.org/32765 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9722 Common Vulnerability Exposure (CVE) ID: CVE-2007-0910 http://osvdb.org/32763 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9514 Common Vulnerability Exposure (CVE) ID: CVE-2007-0911 BugTraq ID: 22505 http://www.securityfocus.com/bid/22505 Bugtraq: 20070209 PHP 5.2.1 crash bug (Google Search) http://www.securityfocus.com/archive/1/459856/100/0/threaded http://cvs.php.net/viewvc.cgi/php-src/ext/standard/string.c?r1=1.445.2.14.2.36&r2=1.445.2.14.2.37 http://marc.info/?l=php-dev&m=117104930526516&w=2 http://marc.info/?l=php-dev&m=117106751715609&w=2 http://osvdb.org/33952 Common Vulnerability Exposure (CVE) ID: CVE-2007-0988 HPdes Security Advisory: HPSBMA02215 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 HPdes Security Advisory: HPSBTU02232 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 HPdes Security Advisory: SSRT071423 HPdes Security Advisory: SSRT071429 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=228858 http://www.php-security.org/MOPB/MOPB-05-2007.html http://www.php.net/releases/5_2_1.php http://osvdb.org/32762 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11092 http://secunia.com/advisories/25056 http://secunia.com/advisories/25423 http://secunia.com/advisories/25850 http://securityreason.com/securityalert/2315 SuSE Security Announcement: SUSE-SA:2007:032 (Google Search) http://www.novell.com/linux/security/advisories/2007_32_php.html http://www.vupen.com/english/advisories/2007/1991 http://www.vupen.com/english/advisories/2007/2374 XForce ISS Database: php-zendhashinit-dos(32709) https://exchange.xforce.ibmcloud.com/vulnerabilities/32709 Common Vulnerability Exposure (CVE) ID: CVE-2007-1286 BugTraq ID: 22765 http://www.securityfocus.com/bid/22765 Debian Security Information: DSA-1282 (Google Search) http://www.debian.org/security/2007/dsa-1282 Debian Security Information: DSA-1283 (Google Search) http://www.debian.org/security/2007/dsa-1283 http://security.gentoo.org/glsa/glsa-200705-19.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:087 http://www.mandriva.com/security/advisories?name=MDKSA-2007:088 http://www.php-security.org/MOPB/MOPB-04-2007.html http://www.osvdb.org/32771 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11575 RedHat Security Advisories: RHSA-2007:0154 http://rhn.redhat.com/errata/RHSA-2007-0154.html RedHat Security Advisories: RHSA-2007:0155 http://rhn.redhat.com/errata/RHSA-2007-0155.html RedHat Security Advisories: RHSA-2007:0163 http://rhn.redhat.com/errata/RHSA-2007-0163.html http://secunia.com/advisories/24910 http://secunia.com/advisories/24924 http://secunia.com/advisories/24941 http://secunia.com/advisories/25025 http://secunia.com/advisories/25062 http://secunia.com/advisories/25445 XForce ISS Database: php-zval-code-execution(32796) https://exchange.xforce.ibmcloud.com/vulnerabilities/32796 Common Vulnerability Exposure (CVE) ID: CVE-2007-1375 BugTraq ID: 22851 http://www.securityfocus.com/bid/22851 https://www.exploit-db.com/exploits/3424 http://www.mandriva.com/security/advisories?name=MDKSA-2007:187 http://www.php-security.org/MOPB/MOPB-14-2007.html http://www.osvdb.org/32780 http://secunia.com/advisories/25057 http://secunia.com/advisories/26895 http://www.ubuntu.com/usn/usn-455-1 Common Vulnerability Exposure (CVE) ID: CVE-2007-1376 BugTraq ID: 22862 http://www.securityfocus.com/bid/22862 https://www.exploit-db.com/exploits/3426 https://www.exploit-db.com/exploits/3427 http://www.php-security.org/MOPB/MOPB-15-2007.html http://www.osvdb.org/32781 Common Vulnerability Exposure (CVE) ID: CVE-2007-1380 BugTraq ID: 22805 http://www.securityfocus.com/bid/22805 https://www.exploit-db.com/exploits/3413 http://www.php-security.org/MOPB/MOPB-10-2007.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10792 Common Vulnerability Exposure (CVE) ID: CVE-2007-1383 http://www.php-security.org/MOPB/MOPB-01-2007.html http://www.osvdb.org/32770
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.