Test ID:	1.3.6.1.4.1.25623.1.0.100604
Category:	Web application abuses
Title:	PHP Ovrimos Extension Code Execution Vulnerability
Summary:	PHP is prone to a code-execution vulnerability due to a design error; in a vulnerable extension.
Description:	Summary: PHP is prone to a code-execution vulnerability due to a design error in a vulnerable extension. Vulnerability Insight: For this vulnerability to occur, the non-maintained 'Ovrimos SQL Server Extension' must have been compiled into the targeted PHP implementation. Vulnerability Impact: Successful exploits may allow an attacker to execute arbitrary code in the context of the affected application. Failed exploits would likely crash PHP. Affected Software/OS: PHP versions prior to 4.4.5 or 5.2.1 with a compiled 'Ovrimos SQL Server Extension' are vulnerable to this issue. Solution: Update to PHP version 4.4.5, 5.2.1 or later. CVSS Score: 5.1 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1379 BugTraq ID: 22833 http://www.securityfocus.com/bid/22833 http://www.php-security.org/MOPB/MOPB-13-2007.html http://www.osvdb.org/34691 Common Vulnerability Exposure (CVE) ID: CVE-2007-1378 http://www.osvdb.org/32779
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.