Test Kennung:	1.3.6.1.4.1.25623.1.0.802670
Kategorie:	Denial of Service
Titel:	PHP pdo_sql_parser.re 'PDO' Extension DoS Vulnerability - Windows
Zusammenfassung:	PHP is prone to a denial of service vulnerability.
Beschreibung:	Summary: PHP is prone to a denial of service vulnerability. Vulnerability Insight: The flaw is due to an error in the PDO extension in pdo_sql_parser.re file, which fails to determine the end of the query string during parsing of prepared statements. Vulnerability Impact: Successful exploitation could allow remote attackers to cause a denial of service condition. Affected Software/OS: PHP version before 5.3.14 and 5.4.x before 5.4.4 on Windows Solution: Update to PHP Version 5.3.14 or 5.4.4 or later. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2012-3450 20120610 [php<=5.4.3] Parsing Bug in PHP PDO prepared statements may lead to access violation http://seclists.org/bugtraq/2012/Jun/60 DSA-2527 http://www.debian.org/security/2012/dsa-2527 MDVSA-2012:108 http://www.mandriva.com/security/advisories?name=MDVSA-2012:108 SUSE-SU-2012:1033 http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00021.html USN-1569-1 http://www.ubuntu.com/usn/USN-1569-1 [oss-security] 20120802 CVE Request: php5 pdo array overread/crash http://www.openwall.com/lists/oss-security/2012/08/02/3 [oss-security] 20120802 Re: CVE Request: php5 pdo array overread/crash http://www.openwall.com/lists/oss-security/2012/08/02/7 http://www.php.net/ChangeLog-5.php https://bugs.php.net/bug.php?id=61755 https://bugzilla.novell.com/show_bug.cgi?id=769785
Copyright	Copyright (C) 2012 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.