Test ID:	1.3.6.1.4.1.25623.1.0.53993
Category:	Fedora Local Security Checks
Title:	Fedora Core 3 FEDORA-2005-517 (php)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to php announced via advisory FEDORA-2005-517. This update includes the PEAR XML_RPC 1.3.1 package, which fixes a security issue in the XML_RPC server implementation. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-1921 to this issue. The bundled version of shtool is also updated, to fix some temporary file handling races. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-1751 to this issue. * Tue Jul 5 2005 Joe Orton 4.3.11-2.6 - pear: update to XML_RPC 1.3.1 (CVE-2005-1921, #162045) - update bundled shtool to 2.0.2 (CVE-2005-1751, #158998) - require autoconf, automake for -devel package (#159283) Solution: Apply the appropriate updates. This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/ This update can also be installed with the Update Agent you can launch the Update Agent with the 'up2date' command. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2005-517 Risk factor : High CVSS Score: 7.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-1921 BugTraq ID: 14088 http://www.securityfocus.com/bid/14088 Bugtraq: 20050629 Advisory 02/2005: Remote code execution in Serendipity (Google Search) http://marc.info/?l=bugtraq&m=112008638320145&w=2 Bugtraq: 20050629 [DRUPAL-SA-2005-003] Drupal 4.6.2 / 4.5.4 fixes critical XML-RPC issue (Google Search) http://marc.info/?l=bugtraq&m=112015336720867&w=2 Debian Security Information: DSA-745 (Google Search) http://www.debian.org/security/2005/dsa-745 Debian Security Information: DSA-746 (Google Search) http://www.debian.org/security/2005/dsa-746 Debian Security Information: DSA-747 (Google Search) http://www.debian.org/security/2005/dsa-747 Debian Security Information: DSA-789 (Google Search) http://www.debian.org/security/2005/dsa-789 http://security.gentoo.org/glsa/glsa-200507-01.xml http://security.gentoo.org/glsa/glsa-200507-06.xml http://security.gentoo.org/glsa/glsa-200507-07.xml HPdes Security Advisory: HPSBTU02083 http://www.securityfocus.com/archive/1/419064/100/0/threaded HPdes Security Advisory: SSRT051069 http://www.mandriva.com/security/advisories?name=MDKSA-2005:109 http://pear.php.net/package/XML_RPC/download/1.3.1 http://www.gulftech.org/?node=research&article_id=00087-07012005 http://www.hardened-php.net/advisory-022005.php https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11294 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A350 http://www.redhat.com/support/errata/RHSA-2005-564.html http://securitytracker.com/id?1015336 http://secunia.com/advisories/15810 http://secunia.com/advisories/15852 http://secunia.com/advisories/15855 http://secunia.com/advisories/15861 http://secunia.com/advisories/15872 http://secunia.com/advisories/15883 http://secunia.com/advisories/15884 http://secunia.com/advisories/15895 http://secunia.com/advisories/15903 http://secunia.com/advisories/15904 http://secunia.com/advisories/15916 http://secunia.com/advisories/15917 http://secunia.com/advisories/15922 http://secunia.com/advisories/15944 http://secunia.com/advisories/15947 http://secunia.com/advisories/15957 http://secunia.com/advisories/16001 http://secunia.com/advisories/16339 http://secunia.com/advisories/16693 http://secunia.com/advisories/17440 http://secunia.com/advisories/17674 http://secunia.com/advisories/18003 SuSE Security Announcement: SUSE-SA:2005:041 (Google Search) http://www.novell.com/linux/security/advisories/2005_41_php_pear.html SuSE Security Announcement: SUSE-SA:2005:049 (Google Search) http://www.novell.com/linux/security/advisories/2005_49_php.html SuSE Security Announcement: SUSE-SA:2005:051 (Google Search) http://marc.info/?l=bugtraq&m=112605112027335&w=2 SuSE Security Announcement: SUSE-SR:2005:018 (Google Search) http://www.novell.com/linux/security/advisories/2005_18_sr.html http://www.vupen.com/english/advisories/2005/2827 Common Vulnerability Exposure (CVE) ID: CVE-2005-1751 BugTraq ID: 13767 http://www.securityfocus.com/bid/13767 http://www.gentoo.org/security/en/glsa/glsa-200506-08.xml http://bugs.gentoo.org/show_bug.cgi?id=93782 http://www.zataz.net/adviso/shtool-05252005.txt http://marc.info/?l=bugtraq&m=111955937622637&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A345 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9639 http://securitytracker.com/id?1014059 http://secunia.com/advisories/15496 http://secunia.com/advisories/15668
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.