Test ID:	1.3.6.1.4.1.25623.1.0.64531
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDVSA-2009:188 (php4-eaccelerator)
Summary:	The remote host is missing an update to php4-eaccelerator;announced via advisory MDVSA-2009:188.
Description:	Summary: The remote host is missing an update to php4-eaccelerator announced via advisory MDVSA-2009:188. Vulnerability Insight: A vulnerability has been found and corrected in php4-eaccelerator: encoder.php in eAccelerator allows remote attackers to execute arbitrary code by copying a local executable file to a location under the web root via the -o option, and then making a direct request to this file, related to upload of image files (CVE-2009-2353). Additionally to addressing the security issue this update also provides php4-eaccelerator 0.9.5. Affected: Corporate 4.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2353 Bugtraq: 20090702 eAccelerator encoder files backup Vulnerability (Google Search) http://www.securityfocus.com/archive/1/504695/100/0/threaded http://www.mandriva.com/security/advisories?name=MDVSA-2009:188
Copyright	Copyright (C) 2009 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.