Test ID:	1.3.6.1.4.1.25623.1.0.110173
Category:	Web application abuses
Title:	PHP < 5.2.0 Multiple Vulnerabilities
Summary:	PHP is prone to multiple vulnerabilities.
Description:	Summary: PHP is prone to multiple vulnerabilities. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-1015 BugTraq ID: 16878 http://www.securityfocus.com/bid/16878 Bugtraq: 20060301 Re: (PHP) mb_send_mail security bypass (Google Search) http://www.securityfocus.com/archive/1/426497/100/0/threaded http://secunia.com/advisories/19979 http://securityreason.com/securityalert/517 SuSE Security Announcement: SUSE-SA:2006:024 (Google Search) http://www.novell.com/linux/security/advisories/05-05-2006.html Common Vulnerability Exposure (CVE) ID: CVE-2006-1549 BugTraq ID: 22766 http://www.securityfocus.com/bid/22766 Bugtraq: 20060409 function *() php/apache Crash PHP 4.4.2 and 5.1.2 (Google Search) http://www.securityfocus.com/archive/1/430453/100/0/threaded Bugtraq: 20060412 Re: function *() php/apache Crash PHP 4.4.2 and 5.1.2 (Google Search) http://www.securityfocus.com/archive/1/430598/100/0/threaded http://www.securityfocus.com/archive/1/430742/100/0/threaded Bugtraq: 20060414 Re: Re: function *() php/apache Crash PHP 4.4.2 and 5.1.2 (Google Search) http://www.securityfocus.com/archive/1/431018/100/0/threaded http://www.php-security.org/MOPB/MOPB-02-2007.html http://www.osvdb.org/24485 http://securitytracker.com/id?1015880 http://securityreason.com/securityalert/2312 http://securityreason.com/securityalert/676 http://securityreason.com/achievement_securityalert/35 http://www.vupen.com/english/advisories/2006/1290 XForce ISS Database: php-function-dos(25704) https://exchange.xforce.ibmcloud.com/vulnerabilities/25704 Common Vulnerability Exposure (CVE) ID: CVE-2006-2660 Bugtraq: 20060611 tempnam() Bypass unique file name PHP 5.1.4 (Google Search) http://www.securityfocus.com/archive/1/436785/100/0/threaded http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0209.html http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 http://securitytracker.com/id?1016271 http://secunia.com/advisories/21125 http://securityreason.com/securityalert/1069 http://www.ubuntu.com/usn/usn-320-1 XForce ISS Database: php-tempnam-bypass(27049) https://exchange.xforce.ibmcloud.com/vulnerabilities/27049 Common Vulnerability Exposure (CVE) ID: CVE-2006-4486 BugTraq ID: 19582 http://www.securityfocus.com/bid/19582 Bugtraq: 20061005 rPSA-2006-0182-1 php php-mysql php-pgsql (Google Search) http://www.securityfocus.com/archive/1/447866/100/0/threaded Debian Security Information: DSA-1331 (Google Search) http://www.debian.org/security/2007/dsa-1331 http://www.hardened-php.net/hphp/changelog.html#hardening_patch_0.4.14 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11086 http://www.redhat.com/support/errata/RHSA-2006-0669.html http://www.redhat.com/support/errata/RHSA-2006-0682.html RedHat Security Advisories: RHSA-2006:0688 http://rhn.redhat.com/errata/RHSA-2006-0688.html http://securitytracker.com/id?1016984 http://secunia.com/advisories/21546 http://secunia.com/advisories/22004 http://secunia.com/advisories/22069 http://secunia.com/advisories/22225 http://secunia.com/advisories/22331 http://secunia.com/advisories/22440 http://secunia.com/advisories/22487 http://secunia.com/advisories/22538 http://secunia.com/advisories/25945 SGI Security Advisory: 20061001-01-P ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc SuSE Security Announcement: SUSE-SA:2006:052 (Google Search) http://www.novell.com/linux/security/advisories/2006_52_php.html TurboLinux Advisory: TLSA-2006-38 http://www.turbolinux.com/security/2006/TLSA-2006-38.txt http://www.ubuntu.com/usn/usn-362-1 Common Vulnerability Exposure (CVE) ID: CVE-2006-4625 BugTraq ID: 19933 http://www.securityfocus.com/bid/19933 Bugtraq: 20060913 Re: PHP 5.1.6 / 4.4.4 Critical php_admin* bypass by ini_restore() (Google Search) http://www.securityfocus.com/archive/1/445712/100/0/threaded http://www.securityfocus.com/archive/1/445882/100/0/threaded HPdes Security Advisory: HPSBMA02215 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 HPdes Security Advisory: HPSBTU02232 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 HPdes Security Advisory: SSRT071423 HPdes Security Advisory: SSRT071429 http://www.mandriva.com/security/advisories?name=MDKSA-2006:185 http://www.securityfocus.com/archive/1/448953/100/0/threaded http://secunia.com/advisories/22282 http://secunia.com/advisories/22338 http://secunia.com/advisories/22424 http://secunia.com/advisories/25423 http://secunia.com/advisories/25850 http://securityreason.com/securityalert/1519 http://securityreason.com/achievement_securityalert/42 SuSE Security Announcement: SUSE-SA:2006:059 (Google Search) http://lists.suse.com/archive/suse-security-announce/2006-Oct/0002.html http://www.vupen.com/english/advisories/2007/1991 http://www.vupen.com/english/advisories/2007/2374 XForce ISS Database: php-inirestore-security-bypass(28853) https://exchange.xforce.ibmcloud.com/vulnerabilities/28853 Common Vulnerability Exposure (CVE) ID: CVE-2006-4812 1016984 1691 http://securityreason.com/securityalert/1691 2006-0055 http://www.trustix.org/errata/2006/0055 20061009 Advisory 09/2006: PHP unserialize() Array Creation Integer Overflow http://www.securityfocus.com/archive/1/448014/100/0/threaded 20349 http://www.securityfocus.com/bid/20349 22280 http://secunia.com/advisories/22280 22281 http://secunia.com/advisories/22281 22300 http://secunia.com/advisories/22300 22331 22338 22533 http://secunia.com/advisories/22533 22538 22650 http://secunia.com/advisories/22650 ADV-2006-3922 http://www.vupen.com/english/advisories/2006/3922 GLSA-200610-14 http://www.gentoo.org/security/en/glsa/glsa-200610-14.xml OpenPKG-SA-2006.023 RHSA-2006:0688 RHSA-2006:0708 http://rhn.redhat.com/errata/RHSA-2006-0708.html SUSE-SA:2006:059 USN-362-1 http://cvs.php.net/viewvc.cgi/ZendEngine2/zend_alloc.c?r1=1.161&r2=1.162 http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm http://support.avaya.com/elmodocs2/security/ASA-2006-234.htm http://www.hardened-php.net/advisory_092006.133.html http://www.hardened-php.net/files/CVE-2006-4812.patch php-ecalloc-integer-overflow(29362) https://exchange.xforce.ibmcloud.com/vulnerabilities/29362 Common Vulnerability Exposure (CVE) ID: CVE-2006-5465 http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html BugTraq ID: 20879 http://www.securityfocus.com/bid/20879 Bugtraq: 20061102 Advisory 13/2006: PHP HTML Entity Encoder Heap Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/450431/100/0/threaded Bugtraq: 20061109 rPSA-2006-0205-1 php php-mysql php-pgsql (Google Search) http://www.securityfocus.com/archive/1/451098/100/0/threaded Bugtraq: 20061129 SYM06-023, Symantec NetBackup PureDisk: PHP update to Address Reported Security Vulnerability (Google Search) http://www.securityfocus.com/archive/1/453024/100/0/threaded Cert/CC Advisory: TA06-333A http://www.us-cert.gov/cas/techalerts/TA06-333A.html Cisco Security Advisory: 20070425 Cisco Applied Intelligence Response: Identifying and Mitigating Exploitation of the PHP HTML Entity Encoder Heap Overflow Vulnerability in Multiple Web-Based Management Interfaces http://www.cisco.com/warp/public/707/cisco-air-20070425-http.shtml Cisco Security Advisory: 20070425 PHP HTML Entity Encoder Heap Overflow Vulnerability in Multiple Web-Based Management Interfaces http://www.cisco.com/en/US/products/products_security_response09186a008082c4fe.html Debian Security Information: DSA-1206 (Google Search) http://www.debian.org/security/2006/dsa-1206 http://security.gentoo.org/glsa/glsa-200703-21.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:196 http://www.hardened-php.net/advisory_132006.138.html http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.028.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10240 http://www.redhat.com/support/errata/RHSA-2006-0730.html http://www.redhat.com/support/errata/RHSA-2006-0731.html RedHat Security Advisories: RHSA-2006:0736 http://rhn.redhat.com/errata/RHSA-2006-0736.html http://securitytracker.com/id?1017152 http://securitytracker.com/id?1017296 http://secunia.com/advisories/22653 http://secunia.com/advisories/22685 http://secunia.com/advisories/22688 http://secunia.com/advisories/22693 http://secunia.com/advisories/22713 http://secunia.com/advisories/22753 http://secunia.com/advisories/22759 http://secunia.com/advisories/22779 http://secunia.com/advisories/22881 http://secunia.com/advisories/22929 http://secunia.com/advisories/23139 http://secunia.com/advisories/23155 http://secunia.com/advisories/23247 http://secunia.com/advisories/24606 http://secunia.com/advisories/25047 SGI Security Advisory: 20061101-01-P ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P SuSE Security Announcement: SUSE-SA:2006:067 (Google Search) http://www.novell.com/linux/security/advisories/2006_67_php.html http://www.trustix.org/errata/2006/0061/ http://www.ubuntu.com/usn/usn-375-1 http://www.vupen.com/english/advisories/2006/4317 http://www.vupen.com/english/advisories/2006/4749 http://www.vupen.com/english/advisories/2006/4750 http://www.vupen.com/english/advisories/2007/1546 XForce ISS Database: php-htmlentities-bo(29971) https://exchange.xforce.ibmcloud.com/vulnerabilities/29971 Common Vulnerability Exposure (CVE) ID: CVE-2006-5706 http://www.php.net/releases/5_2_0.php Common Vulnerability Exposure (CVE) ID: CVE-2006-7205 http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-04-02 http://www.osvdb.org/24945 http://securitytracker.com/id?1015979 Common Vulnerability Exposure (CVE) ID: CVE-2007-0448 BugTraq ID: 22261 http://www.securityfocus.com/bid/22261 http://securityreason.com/securityalert/2175 http://securityreason.com/achievement_securityalert/44 Common Vulnerability Exposure (CVE) ID: CVE-2007-1381 http://www.php-security.org/MOPB/MOPB-09-2007.html http://www.osvdb.org/32775 Common Vulnerability Exposure (CVE) ID: CVE-2007-1584 https://www.exploit-db.com/exploits/3517 http://www.php-security.org/MOPB/MOPB-25-2007.html Common Vulnerability Exposure (CVE) ID: CVE-2007-1888 http://www.mandriva.com/security/advisories?name=MDKSA-2007:091 http://www.php-security.org/MOPB/MOPB-41-2007.html http://www.sqlite.org/cvstrac/rlog?f=sqlite/src/encode.c http://osvdb.org/39177 http://secunia.com/advisories/25057 http://www.ubuntu.com/usn/usn-455-1 http://www.attrition.org/pipermail/vim/2007-April/001540.html XForce ISS Database: sqlite-sqlitedecodebinary-bo(38518) https://exchange.xforce.ibmcloud.com/vulnerabilities/38518 Common Vulnerability Exposure (CVE) ID: CVE-2007-2844 BugTraq ID: 24109 http://www.securityfocus.com/bid/24109 http://blog.php-security.org/archives/82-Suhosin-0.9.20-and-crypt-Thread-Safety-Vulnerability.html http://osvdb.org/36088 http://secunia.com/advisories/25434 XForce ISS Database: php-crypt-authentication-bypass(34601) https://exchange.xforce.ibmcloud.com/vulnerabilities/34601 Common Vulnerability Exposure (CVE) ID: CVE-2007-5424 Bugtraq: 20071010 Vulnerabilities digest (Google Search) http://www.securityfocus.com/archive/1/482006/100/0/threaded http://securityvulns.com/news/PHP/alias-pb.html http://securityvulns.ru/Sdocument67.html http://securityreason.com/securityalert/3216
Copyright	Copyright (C) 2012 NopSec Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.