ID de Prueba:	1.3.6.1.4.1.25623.1.0.62090
Categoría:	CentOS Local Security Checks
Título:	CentOS Security Advisory CESA-2008:0546-01 (php)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates to php announced in advisory CESA-2008:0546-01. For details on the issues addressed in this update, please visit the referenced security advisories. Solution: Update the appropriate packages on your system. http://www.securityspace.com/smysecure/catid.html?in=CESA-2008:0546-01 http://www.securityspace.com/smysecure/catid.html?in=RHSA-2008:0546 https://rhn.redhat.com/errata/rh21as-errata.html Risk factor : Critical CVSS Score: 10.0
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2051 http://lists.apple.com/archives/security-announce//2008/Jul/msg00003.html BugTraq ID: 29009 http://www.securityfocus.com/bid/29009 Bugtraq: 20080523 rPSA-2008-0176-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl (Google Search) http://www.securityfocus.com/archive/1/492535/100/0/threaded Bugtraq: 20080527 rPSA-2008-0178-1 php php-mysql php-pgsql (Google Search) http://www.securityfocus.com/archive/1/492671/100/0/threaded Debian Security Information: DSA-1572 (Google Search) http://www.debian.org/security/2008/dsa-1572 Debian Security Information: DSA-1578 (Google Search) http://www.debian.org/security/2008/dsa-1578 https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00779.html https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00773.html http://security.gentoo.org/glsa/glsa-200811-05.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:125 http://www.mandriva.com/security/advisories?name=MDVSA-2008:126 http://www.mandriva.com/security/advisories?name=MDVSA-2008:127 http://www.mandriva.com/security/advisories?name=MDVSA-2008:128 http://www.openwall.com/lists/oss-security/2008/05/02/2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10256 http://www.redhat.com/support/errata/RHSA-2008-0505.html http://www.redhat.com/support/errata/RHSA-2008-0544.html http://www.redhat.com/support/errata/RHSA-2008-0545.html http://www.redhat.com/support/errata/RHSA-2008-0546.html http://www.redhat.com/support/errata/RHSA-2008-0582.html http://secunia.com/advisories/30048 http://secunia.com/advisories/30083 http://secunia.com/advisories/30158 http://secunia.com/advisories/30288 http://secunia.com/advisories/30345 http://secunia.com/advisories/30411 http://secunia.com/advisories/30757 http://secunia.com/advisories/30828 http://secunia.com/advisories/30967 http://secunia.com/advisories/31119 http://secunia.com/advisories/31124 http://secunia.com/advisories/31200 http://secunia.com/advisories/31326 http://secunia.com/advisories/32746 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.488951 SuSE Security Announcement: SUSE-SR:2008:014 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html http://www.ubuntu.com/usn/usn-628-1 http://www.vupen.com/english/advisories/2008/1412 http://www.vupen.com/english/advisories/2008/2268 Common Vulnerability Exposure (CVE) ID: CVE-2007-5898 Debian Security Information: DSA-1444 (Google Search) http://www.debian.org/security/2008/dsa-1444 HPdes Security Advisory: HPSBUX02332 http://www.securityfocus.com/archive/1/491693/100/0/threaded HPdes Security Advisory: SSRT080056 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10080 http://securitytracker.com/id?1018934 http://secunia.com/advisories/27648 http://secunia.com/advisories/27659 http://secunia.com/advisories/27864 http://secunia.com/advisories/28249 http://secunia.com/advisories/28658 http://secunia.com/advisories/30040 SuSE Security Announcement: SUSE-SA:2008:004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html https://usn.ubuntu.com/549-1/ http://www.ubuntu.com/usn/usn-549-2 Common Vulnerability Exposure (CVE) ID: CVE-2007-5899 http://osvdb.org/38918 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11211 Common Vulnerability Exposure (CVE) ID: CVE-2006-7228 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates http://www.securityfocus.com/archive/1/488457/100/0/threaded 20080416 VMSA-2008-0007 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus http://www.securityfocus.com/archive/1/490917/100/0/threaded 26462 http://www.securityfocus.com/bid/26462 27582 http://secunia.com/advisories/27582 27741 http://secunia.com/advisories/27741 27773 http://secunia.com/advisories/27773 27776 http://secunia.com/advisories/27776 28027 http://secunia.com/advisories/28027 28041 http://secunia.com/advisories/28041 28050 http://secunia.com/advisories/28050 28406 http://secunia.com/advisories/28406 28414 http://secunia.com/advisories/28414 28658 28714 http://secunia.com/advisories/28714 28720 http://secunia.com/advisories/28720 29032 http://secunia.com/advisories/29032 29085 http://secunia.com/advisories/29085 29785 http://secunia.com/advisories/29785 30106 http://secunia.com/advisories/30106 30155 http://secunia.com/advisories/30155 30219 http://secunia.com/advisories/30219 31124 ADV-2008-0637 http://www.vupen.com/english/advisories/2008/0637 ADV-2008-1234 http://www.vupen.com/english/advisories/2008/1234/references DSA-1570 http://www.debian.org/security/2008/dsa-1570 GLSA-200711-30 http://security.gentoo.org/glsa/glsa-200711-30.xml GLSA-200801-02 http://security.gentoo.org/glsa/glsa-200801-02.xml GLSA-200801-18 http://security.gentoo.org/glsa/glsa-200801-18.xml GLSA-200801-19 http://security.gentoo.org/glsa/glsa-200801-19.xml GLSA-200802-10 http://security.gentoo.org/glsa/glsa-200802-10.xml GLSA-200805-11 http://security.gentoo.org/glsa/glsa-200805-11.xml MDVSA-2008:012 http://www.mandriva.com/security/advisories?name=MDVSA-2008:012 MDVSA-2008:030 http://www.mandriva.com/security/advisories?name=MDVSA-2008:030 RHSA-2007:1059 http://www.redhat.com/support/errata/RHSA-2007-1059.html RHSA-2007:1063 http://www.redhat.com/support/errata/RHSA-2007-1063.html RHSA-2007:1065 http://www.redhat.com/support/errata/RHSA-2007-1065.html RHSA-2007:1068 http://www.redhat.com/support/errata/RHSA-2007-1068.html RHSA-2007:1076 http://www.redhat.com/support/errata/RHSA-2007-1076.html RHSA-2007:1077 http://www.redhat.com/support/errata/RHSA-2007-1077.html RHSA-2008:0546 SUSE-SA:2007:062 http://www.novell.com/linux/security/advisories/2007_62_pcre.html SUSE-SA:2008:004 [Security-announce] 20080221 VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates http://lists.vmware.com/pipermail/security-announce/2008/000005.html [Security-announce] 20080415 VMSA-2008-0007 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus http://lists.vmware.com/pipermail/security-announce/2008/000014.html http://bugs.gentoo.org/show_bug.cgi?id=198976 http://scary.beasts.org/security/CESA-2007-006.html http://support.avaya.com/elmodocs2/security/ASA-2007-505.htm http://www.pcre.org/changelog.txt https://bugzilla.redhat.com/show_bug.cgi?id=383371 oval:org.mitre.oval:def:10810 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10810 Common Vulnerability Exposure (CVE) ID: CVE-2007-1660 http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html BugTraq ID: 26346 http://www.securityfocus.com/bid/26346 Bugtraq: 20071106 rPSA-2007-0231-1 pcre (Google Search) http://www.securityfocus.com/archive/1/483357/100/0/threaded Bugtraq: 20071112 FLEA-2007-0064-1 pcre (Google Search) http://www.securityfocus.com/archive/1/483579/100/0/threaded Bugtraq: 20080416 VMSA-2008-0007 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus (Google Search) Cert/CC Advisory: TA07-352A http://www.us-cert.gov/cas/techalerts/TA07-352A.html Debian Security Information: DSA-1399 (Google Search) http://www.debian.org/security/2007/dsa-1399 Debian Security Information: DSA-1570 (Google Search) http://www.mandriva.com/security/advisories?name=MDKSA-2007:211 http://www.mandriva.com/security/advisories?name=MDKSA-2007:212 http://www.mandriva.com/security/advisories?name=MDKSA-2007:213 http://mail.gnome.org/archives/gtk-devel-list/2007-November/msg00022.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10562 http://www.redhat.com/support/errata/RHSA-2007-0967.html http://www.redhat.com/support/errata/RHSA-2007-0968.html http://securitytracker.com/id?1018895 http://secunia.com/advisories/27538 http://secunia.com/advisories/27543 http://secunia.com/advisories/27547 http://secunia.com/advisories/27554 http://secunia.com/advisories/27598 http://secunia.com/advisories/27697 http://secunia.com/advisories/27862 http://secunia.com/advisories/27965 http://secunia.com/advisories/28136 http://secunia.com/advisories/29420 SuSE Security Announcement: SUSE-SA:2007:062 (Google Search) SuSE Security Announcement: SUSE-SR:2007:025 (Google Search) http://www.novell.com/linux/security/advisories/2007_25_sr.html https://usn.ubuntu.com/547-1/ http://www.vupen.com/english/advisories/2007/3725 http://www.vupen.com/english/advisories/2007/3790 http://www.vupen.com/english/advisories/2007/4238 http://www.vupen.com/english/advisories/2008/0924/references XForce ISS Database: pcre-character-class-dos(38273) https://exchange.xforce.ibmcloud.com/vulnerabilities/38273 Common Vulnerability Exposure (CVE) ID: CVE-2008-2107 Bugtraq: 20080506 Advisory SE-2008-02: PHP GENERATE_SEED() Weak Random Number Seed Vulnerability (Google Search) http://www.securityfocus.com/archive/1/491683/100/0/threaded Debian Security Information: DSA-1789 (Google Search) http://www.debian.org/security/2009/dsa-1789 http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0103.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:129 http://www.mandriva.com/security/advisories?name=MDVSA-2008:130 http://www.sektioneins.de/advisories/SE-2008-02.txt https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10644 http://secunia.com/advisories/35003 http://securityreason.com/securityalert/3859 XForce ISS Database: php-generateseed-security-bypass(42284) https://exchange.xforce.ibmcloud.com/vulnerabilities/42284 XForce ISS Database: php-generateseed-weak-security(42226) https://exchange.xforce.ibmcloud.com/vulnerabilities/42226 Common Vulnerability Exposure (CVE) ID: CVE-2008-2108 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10844
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.