Test ID:	1.3.6.1.4.1.25623.1.0.900925
Category:	Denial of Service
Title:	PHP dba_replace Denial of Service Vulnerability
Summary:	PHP is prone to a Denial of Service vulnerability.
Description:	Summary: PHP is prone to a Denial of Service vulnerability. Vulnerability Insight: An error occurs in 'dba_replace()' function while processing malformed user supplied data containing a key with the NULL byte. Vulnerability Impact: Successful exploitation could allow attackers to execute arbitrary code corrupt files and cause denial of service. Affected Software/OS: PHP 4.x and 5.2.6 on all running platform. Solution: Update to version 5.2.7 or later. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-7068 Bugtraq: 20081127 SecurityReason : PHP 5.2.6 dba_replace() destroying file (Google Search) http://www.securityfocus.com/archive/1/498746/100/0/threaded Bugtraq: 20081206 Re: SecurityReason : PHP 5.2.6 dba_replace() destroying file (Google Search) http://www.securityfocus.com/archive/1/498981/100/0/threaded http://www.securityfocus.com/archive/1/498982/100/0/threaded http://www.osvdb.org/52206 http://securityreason.com/achievement_securityalert/58 XForce ISS Database: php-dbareplace-file-corruption(47316) https://exchange.xforce.ibmcloud.com/vulnerabilities/47316
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.