ID de Prueba:	1.3.6.1.4.1.25623.1.0.900925
Categoría:	Denial of Service
Título:	PHP dba_replace Denial of Service Vulnerability
Resumen:	PHP is prone to a Denial of Service vulnerability.
Descripción:	Summary: PHP is prone to a Denial of Service vulnerability. Vulnerability Insight: An error occurs in 'dba_replace()' function while processing malformed user supplied data containing a key with the NULL byte. Vulnerability Impact: Successful exploitation could allow attackers to execute arbitrary code corrupt files and cause denial of service. Affected Software/OS: PHP 4.x and 5.2.6 on all running platform. Solution: Update to version 5.2.7 or later. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-7068 Bugtraq: 20081127 SecurityReason : PHP 5.2.6 dba_replace() destroying file (Google Search) http://www.securityfocus.com/archive/1/498746/100/0/threaded Bugtraq: 20081206 Re: SecurityReason : PHP 5.2.6 dba_replace() destroying file (Google Search) http://www.securityfocus.com/archive/1/498981/100/0/threaded http://www.securityfocus.com/archive/1/498982/100/0/threaded http://www.osvdb.org/52206 http://securityreason.com/achievement_securityalert/58 XForce ISS Database: php-dbareplace-file-corruption(47316) https://exchange.xforce.ibmcloud.com/vulnerabilities/47316
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.