ID de Prueba:	1.3.6.1.4.1.25623.1.0.800393
Categoría:	Denial of Service
Título:	PHP DoS Vulnerability (Apr 2009)
Resumen:	PHP is prone to a denial of service (DoS) vulnerability.
Descripción:	Summary: PHP is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Improper handling of .zip file while doing extraction via php_zip_make_relative_path function in php_zip.c file. Vulnerability Impact: Successful exploitation could result in denial of service condition. Affected Software/OS: PHP version prior to 5.2.9 Solution: Update to version 5.2.9 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1272 http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html HPdes Security Advisory: HPSBMA02447 http://marc.info/?l=bugtraq&m=125017764422557&w=2 HPdes Security Advisory: SSRT090062 http://cvs.php.net/viewvc.cgi/php-src/ext/zip/php_zip.c?r1=1.1.2.48&r2=1.1.2.49 http://www.openwall.com/lists/oss-security/2009/04/01/9 http://www.openwall.com/lists/oss-security/2009/04/09/1 http://secunia.com/advisories/35685 http://secunia.com/advisories/36701 SuSE Security Announcement: SUSE-SR:2009:012 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.