ID de Prueba:	1.3.6.1.4.1.25623.1.0.802670
Categoría:	Denial of Service
Título:	PHP pdo_sql_parser.re 'PDO' Extension DoS Vulnerability - Windows
Resumen:	PHP is prone to a denial of service vulnerability.
Descripción:	Summary: PHP is prone to a denial of service vulnerability. Vulnerability Insight: The flaw is due to an error in the PDO extension in pdo_sql_parser.re file, which fails to determine the end of the query string during parsing of prepared statements. Vulnerability Impact: Successful exploitation could allow remote attackers to cause a denial of service condition. Affected Software/OS: PHP version before 5.3.14 and 5.4.x before 5.4.4 on Windows Solution: Update to PHP Version 5.3.14 or 5.4.4 or later. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-3450 20120610 [php<=5.4.3] Parsing Bug in PHP PDO prepared statements may lead to access violation http://seclists.org/bugtraq/2012/Jun/60 DSA-2527 http://www.debian.org/security/2012/dsa-2527 MDVSA-2012:108 http://www.mandriva.com/security/advisories?name=MDVSA-2012:108 SUSE-SU-2012:1033 http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00021.html USN-1569-1 http://www.ubuntu.com/usn/USN-1569-1 [oss-security] 20120802 CVE Request: php5 pdo array overread/crash http://www.openwall.com/lists/oss-security/2012/08/02/3 [oss-security] 20120802 Re: CVE Request: php5 pdo array overread/crash http://www.openwall.com/lists/oss-security/2012/08/02/7 http://www.php.net/ChangeLog-5.php https://bugs.php.net/bug.php?id=61755 https://bugzilla.novell.com/show_bug.cgi?id=769785
Copyright	Copyright (C) 2012 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.