Test ID:	1.3.6.1.4.1.25623.1.0.702868
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-2868-1)
Summary:	The remote host is missing an update for the Debian 'php5' package(s) announced via the DSA-2868-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'php5' package(s) announced via the DSA-2868-1 advisory. Vulnerability Insight: It was discovered that file, a file type classification tool, contains a flaw in the handling of indirect magic rules in the libmagic library, which leads to an infinite recursion when trying to determine the file type of certain files. The Common Vulnerabilities and Exposures project ID CVE-2014-1943 has been assigned to identify this flaw. Additionally, other well-crafted files might result in long computation times (while using 100% CPU) and overlong results. This update corrects this flaw in the copy that is embedded in the php5 package. For the oldstable distribution (squeeze), this problem has been fixed in version 5.3.3-7+squeeze19. For the stable distribution (wheezy), this problem has been fixed in version 5.4.4-14+deb7u8. For the testing distribution (jessie) and the unstable distribution (sid), this problem will be fixed soon. We recommend that you upgrade your php5 packages. Affected Software/OS: 'php5' package(s) on Debian 6, Debian 7. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1943 Debian Security Information: DSA-2861 (Google Search) http://www.debian.org/security/2014/dsa-2861 Debian Security Information: DSA-2868 (Google Search) http://www.debian.org/security/2014/dsa-2868 http://mx.gw.com/pipermail/file/2014/001330.html http://mx.gw.com/pipermail/file/2014/001334.html http://mx.gw.com/pipermail/file/2014/001337.html http://mx.gw.com/pipermail/file/2014/001327.html RedHat Security Advisories: RHSA-2014:1765 http://rhn.redhat.com/errata/RHSA-2014-1765.html SuSE Security Announcement: openSUSE-SU-2014:0364 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-03/msg00034.html SuSE Security Announcement: openSUSE-SU-2014:0367 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-03/msg00037.html http://www.ubuntu.com/usn/USN-2123-1 http://www.ubuntu.com/usn/USN-2126-1 Common Vulnerability Exposure (CVE) ID: CVE-2014-8117 BugTraq ID: 71692 http://www.securityfocus.com/bid/71692 FreeBSD Security Advisory: FreeBSD-SA-14:28 https://www.freebsd.org/security/advisories/FreeBSD-SA-14:28.file.asc http://seclists.org/oss-sec/2014/q4/1056 RedHat Security Advisories: RHSA-2016:0760 http://rhn.redhat.com/errata/RHSA-2016-0760.html http://www.securitytracker.com/id/1031344 http://secunia.com/advisories/61944 http://secunia.com/advisories/62081 http://www.ubuntu.com/usn/USN-2494-1 http://www.ubuntu.com/usn/USN-2535-1
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.