Test ID:	1.3.6.1.4.1.25623.1.0.835236
Category:	HP-UX Local Security Checks
Title:	HP-UX Update for Apache with PHP HPSBUX02543
Summary:	Check for the Version of Apache with PHP
Description:	Vulnerability Insight: Potential security vulnerabilities have been identified with HP-UX running Apache with PHP. These vulnerabilities could be exploited remotely to create a Denial of Service (DoS) gain unauthorized access, and perform cross site scripting (XSS). Impact: Remote Denial of Service (DoS) unauthorized Access cross site scripting (XSS). Affected Software/OS: Apache with PHP on HP-UX B.11.11, B.11.23, B.11.31 running Apache with PHP v5.2.6 or earlier. Fix: Please Install the Updated Packages. References: http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02247738
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2687 Debian Security Information: DSA-1940 (Google Search) http://www.debian.org/security/2009/dsa-1940 HPdes Security Advisory: HPSBUX02543 http://marc.info/?l=bugtraq&m=127680701405735&w=2 HPdes Security Advisory: SSRT100152 http://www.mandriva.com/security/advisories?name=MDVSA-2009:167 http://www.mandriva.com/security/advisories?name=MDVSA-2009:145 SuSE Security Announcement: SUSE-SR:2009:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html http://www.ubuntulinux.org/support/documentation/usn/usn-824-1 BugTraq ID: 35440 http://www.securityfocus.com/bid/35440 http://osvdb.org/55222 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10695 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6655 http://secunia.com/advisories/35441 http://secunia.com/advisories/36462 http://secunia.com/advisories/37482 http://secunia.com/advisories/40262 http://www.vupen.com/english/advisories/2009/1632 XForce ISS Database: php-exifreaddata-dos(51253) http://xforce.iss.net/xforce/xfdb/51253 Common Vulnerability Exposure (CVE) ID: CVE-2009-3291 http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html HPdes Security Advisory: HPSBOV02683 http://marc.info/?l=bugtraq&m=130497311408250&w=2 HPdes Security Advisory: SSRT090208 http://www.osvdb.org/58185 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10438 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7394 http://www.securitytracker.com/id?1022914 http://secunia.com/advisories/36791 http://www.vupen.com/english/advisories/2009/3184 XForce ISS Database: php-certificate-unspecified(53334) http://xforce.iss.net/xforce/xfdb/53334 Common Vulnerability Exposure (CVE) ID: CVE-2009-3292 http://www.openwall.com/lists/oss-security/2009/11/20/2 http://www.openwall.com/lists/oss-security/2009/11/20/3 http://news.php.net/php.announce/79 http://www.mandriva.com/security/advisories?name=MDVSA-2009:302 http://www.osvdb.org/58186 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9982 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7652 http://secunia.com/advisories/37412 Common Vulnerability Exposure (CVE) ID: CVE-2009-3293 http://www.osvdb.org/58187 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7047 Common Vulnerability Exposure (CVE) ID: CVE-2009-3557 http://www.openwall.com/lists/oss-security/2009/11/20/5 http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:285 http://www.mandriva.com/security/advisories?name=MDVSA-2009:303 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7396 http://secunia.com/advisories/37821 http://securityreason.com/securityalert/6601 http://www.vupen.com/english/advisories/2009/3593 Common Vulnerability Exposure (CVE) ID: CVE-2009-4017 Bugtraq: 20091120 PHP "multipart/form-data" denial of service (Google Search) http://www.securityfocus.com/archive/1/archive/1/507982/100/0/threaded http://seclists.org/fulldisclosure/2009/Nov/228 http://www.openwall.com/lists/oss-security/2009/11/20/7 http://www.acunetix.com/blog/websecuritynews/php-multipartform-data-denial-of-service/ HPdes Security Advisory: HPSBMA02568 http://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995 HPdes Security Advisory: SSRT100219 http://www.mandriva.com/security/advisories?name=MDVSA-2009:305 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10483 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6667 http://secunia.com/advisories/41480 http://secunia.com/advisories/41490 XForce ISS Database: php-multipart-formdata-dos(54455) http://xforce.iss.net/xforce/xfdb/54455 Common Vulnerability Exposure (CVE) ID: CVE-2009-4018 http://marc.info/?l=oss-security&m=125886770008678&w=2 http://marc.info/?l=oss-security&m=125897935330618&w=2 http://www.openwall.com/lists/oss-security/2009/11/23/15 BugTraq ID: 37138 http://www.securityfocus.com/bid/37138 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7256 Common Vulnerability Exposure (CVE) ID: CVE-2009-4142 Debian Security Information: DSA-2001 (Google Search) http://www.debian.org/security/2010/dsa-2001 BugTraq ID: 37389 http://www.securityfocus.com/bid/37389 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10005 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7085 http://securitytracker.com/id?1023372 http://secunia.com/advisories/38648 Common Vulnerability Exposure (CVE) ID: CVE-2009-4143 http://www.mandriva.com/security/advisories?name=MDVSA-2010:045 BugTraq ID: 37390 http://www.securityfocus.com/bid/37390 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7439
Copyright	Copyright (c) 2010 Greenbone Networks GmbH

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: