Test ID:	1.3.6.1.4.1.25623.1.0.100662
Category:	Web application abuses
Title:	PHP Mysqlnd Extension Information Disclosure and Multiple Buffer Overflow Vulnerabilities
Summary:	The PHP Mysqlnd extension is prone to an information-disclosure; vulnerability and multiple buffer-overflow vulnerabilities.
Description:	Summary: The PHP Mysqlnd extension is prone to an information-disclosure vulnerability and multiple buffer-overflow vulnerabilities. Vulnerability Impact: Successful exploits can allow attackers to obtain sensitive information or to execute arbitrary code in the context of applications using the vulnerable PHP functions. Failed attempts may lead to a denial-of-service condition. Affected Software/OS: PHP 5.3 through 5.3.2 are vulnerable. Solution: Updates are available. Please see the references for details. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3062 http://php-security.org/2010/05/31/mops-2010-056-php-php_mysqlnd_ok_read-information-leak-vulnerability/index.html http://php-security.org/2010/05/31/mops-2010-057-php-php_mysqlnd_rset_header_read-buffer-overflow-vulnerability/index.html SuSE Security Announcement: SUSE-SR:2010:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html SuSE Security Announcement: SUSE-SR:2010:018 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html Common Vulnerability Exposure (CVE) ID: CVE-2010-3063 http://php-security.org/2010/05/31/mops-2010-058-php-php_mysqlnd_read_error_from_line-buffer-overflow-vulnerability/index.html Common Vulnerability Exposure (CVE) ID: CVE-2010-3064 http://php-security.org/2010/05/31/mops-2010-059-php-php_mysqlnd_auth_write-stack-buffer-overflow-vulnerability/index.html
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.