Test ID:	1.3.6.1.4.1.25623.1.0.68173
Category:	Slackware Local Security Checks
Title:	Slackware: Security Advisory (SSA:2010-240-04)
Summary:	The remote host is missing an update for the 'php' package(s) announced via the SSA:2010-240-04 advisory.
Description:	Summary: The remote host is missing an update for the 'php' package(s) announced via the SSA:2010-240-04 advisory. Vulnerability Insight: New php packages are available for Slackware 11.0 (extra), 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: +--------------------------+ patches/packages/php-5.2.14-i486-1_slack13.1.txz: Upgraded. Fixed several security issues. For more information, see: [links moved to references] (* Security fix *) +--------------------------+ Affected Software/OS: 'php' package(s) on Slackware 11.0, Slackware 12.0, Slackware 12.1, Slackware 12.2, Slackware 13.0, Slackware 13.1, Slackware current. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1917 Debian Security Information: DSA-2089 (Google Search) http://www.debian.org/security/2010/dsa-2089 HPdes Security Advisory: HPSBMA02662 http://marc.info/?l=bugtraq&m=130331363227777&w=2 HPdes Security Advisory: SSRT100409 http://www.php-security.org/2010/05/11/mops-2010-021-php-fnmatch-stack-exhaustion-vulnerability/index.html http://www.redhat.com/support/errata/RHSA-2010-0919.html http://secunia.com/advisories/40860 http://secunia.com/advisories/42410 SuSE Security Announcement: SUSE-SR:2010:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html SuSE Security Announcement: SUSE-SR:2010:018 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html http://www.vupen.com/english/advisories/2010/3081 XForce ISS Database: php-fnmatchfunction-dos(58585) https://exchange.xforce.ibmcloud.com/vulnerabilities/58585 Common Vulnerability Exposure (CVE) ID: CVE-2010-2225 40860 40948 http://www.securityfocus.com/bid/40948 APPLE-SA-2010-08-24-1 http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html DSA-2089 HPSBOV02763 http://marc.info/?l=bugtraq&m=133469208622507&w=2 SSRT100826 SUSE-SR:2010:017 SUSE-SR:2010:018 http://pastebin.com/mXGidCsd http://support.apple.com/kb/HT4312 http://twitter.com/i0n1c/statuses/16373156076 http://twitter.com/i0n1c/statuses/16447867829 https://bugzilla.redhat.com/show_bug.cgi?id=605641 php-splobjectstorage-code-execution(59610) https://exchange.xforce.ibmcloud.com/vulnerabilities/59610
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.