Test ID:	1.3.6.1.4.1.25623.1.0.100602
Category:	Web application abuses
Title:	PHP Session Data Deserialization Arbitrary Code Execution Vulnerability
Summary:	PHP is prone to an arbitrary-code-execution vulnerability.
Description:	Summary: PHP is prone to an arbitrary-code-execution vulnerability. Vulnerability Impact: An attacker may exploit this issue to execute arbitrary code within the context of the affected webserver. Affected Software/OS: This issue affects PHP 4 versions prior to 4.4.5 and PHP 5 versions prior to 5.2.1. Solution: Please see the references for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1701 BugTraq ID: 23120 http://www.securityfocus.com/bid/23120 http://security.gentoo.org/glsa/glsa-200705-19.xml HPdes Security Advisory: HPSBMA02215 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 HPdes Security Advisory: HPSBTU02232 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 HPdes Security Advisory: SSRT071423 HPdes Security Advisory: SSRT071429 http://www.php-security.org/MOPB/MOPB-31-2007.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11034 http://secunia.com/advisories/25423 http://secunia.com/advisories/25445 http://secunia.com/advisories/25850 http://www.vupen.com/english/advisories/2007/1991 http://www.vupen.com/english/advisories/2007/2374 XForce ISS Database: php-sessiondecode-code-execution(33658) https://exchange.xforce.ibmcloud.com/vulnerabilities/33658 Common Vulnerability Exposure (CVE) ID: CVE-2007-1700 BugTraq ID: 23119 http://www.securityfocus.com/bid/23119 Debian Security Information: DSA-1283 (Google Search) http://www.debian.org/security/2007/dsa-1283 http://www.php-security.org/MOPB/MOPB-30-2007.html http://secunia.com/advisories/25056 http://secunia.com/advisories/25057 http://secunia.com/advisories/25062 SuSE Security Announcement: SUSE-SA:2007:032 (Google Search) http://www.novell.com/linux/security/advisories/2007_32_php.html http://www.ubuntu.com/usn/usn-455-1 XForce ISS Database: php-session-extension-code-execution(33520) https://exchange.xforce.ibmcloud.com/vulnerabilities/33520
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.