Test ID:	1.3.6.1.4.1.25623.1.0.65329
Category:	SuSE Local Security Checks
Title:	SLES9: Security update for PHP4
Summary:	SLES9: Security update for PHP4
Description:	The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: php4-imap php4-gd php4-mysql php4-session php4-pgsql php4-fastcgi php4-mbstring php4-recode php4 apache2-mod_php4 php4-curl php4-sysvshm mod_php4-servlet mod_php4-core php4-wddx php4-exif php4-pear php4-servlet php4-devel apache-mod_php4 For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5009430 within the SuSE Enterprise Server 9 patch database at http://download.novell.com/patch/finder/ Solution: Please install the updates provided by SuSE.
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-5465 Bugtraq: 20061102 Advisory 13/2006: PHP HTML Entity Encoder Heap Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/archive/1/450431/100/0/threaded Bugtraq: 20061109 rPSA-2006-0205-1 php php-mysql php-pgsql (Google Search) http://www.securityfocus.com/archive/1/archive/1/451098/100/0/threaded Bugtraq: 20061129 SYM06-023, Symantec NetBackup PureDisk: PHP update to Address Reported Security Vulnerability (Google Search) http://www.securityfocus.com/archive/1/archive/1/453024/100/0/threaded http://www.hardened-php.net/advisory_132006.138.html http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html Cisco Security Advisory: 20070425 Cisco Applied Intelligence Response: Identifying and Mitigating Exploitation of the PHP HTML Entity Encoder Heap Overflow Vulnerability in Multiple Web-Based Management Interfaces http://www.cisco.com/warp/public/707/cisco-air-20070425-http.shtml Cisco Security Advisory: 20070425 PHP HTML Entity Encoder Heap Overflow Vulnerability in Multiple Web-Based Management Interfaces http://www.cisco.com/en/US/products/products_security_response09186a008082c4fe.html Debian Security Information: DSA-1206 (Google Search) http://www.debian.org/security/2006/dsa-1206 http://security.gentoo.org/glsa/glsa-200703-21.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:196 http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.028.html http://www.redhat.com/support/errata/RHSA-2006-0730.html RedHat Security Advisories: RHSA-2006:0736 http://rhn.redhat.com/errata/RHSA-2006-0736.html http://www.redhat.com/support/errata/RHSA-2006-0731.html SGI Security Advisory: 20061101-01-P ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P SuSE Security Announcement: SUSE-SA:2006:067 (Google Search) http://www.novell.com/linux/security/advisories/2006_67_php.html http://www.trustix.org/errata/2006/0061/ TurboLinux Advisory: TLSA-2006-38 http://www.turbolinux.com/security/2006/TLSA-2006-38.txt http://www.ubuntu.com/usn/usn-375-1 Cert/CC Advisory: TA06-333A http://www.us-cert.gov/cas/techalerts/TA06-333A.html BugTraq ID: 20879 http://www.securityfocus.com/bid/20879 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10240 http://www.vupen.com/english/advisories/2006/4317 http://www.vupen.com/english/advisories/2006/4749 http://www.vupen.com/english/advisories/2006/4750 http://www.vupen.com/english/advisories/2007/1546 http://securitytracker.com/id?1017152 http://securitytracker.com/id?1017296 http://secunia.com/advisories/22653 http://secunia.com/advisories/22688 http://secunia.com/advisories/22693 http://secunia.com/advisories/22753 http://secunia.com/advisories/22713 http://secunia.com/advisories/22759 http://secunia.com/advisories/22929 http://secunia.com/advisories/23139 http://secunia.com/advisories/23155 http://secunia.com/advisories/23247 http://secunia.com/advisories/22685 http://secunia.com/advisories/22779 http://secunia.com/advisories/22881 http://secunia.com/advisories/24606 http://secunia.com/advisories/25047 XForce ISS Database: php-htmlentities-bo(29971) http://xforce.iss.net/xforce/xfdb/29971
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: