ID de Prueba:	1.3.6.1.4.1.25623.1.0.100529
Categoría:	Web application abuses
Título:	PHP 5.3.1 Multiple DoS Vulnerabilities
Resumen:	PHP is prone to multiple denial of service (DoS); vulnerabilities.
Descripción:	Summary: PHP is prone to multiple denial of service (DoS) vulnerabilities. Vulnerability Insight: The xmlrpc extension in PHP does not properly handle a missing methodName element in the first argument to the xmlrpc_decode_request function, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly have unspecified other impact via a crafted argument. Vulnerability Impact: Exploiting these issues allows remote attackers to cause denial of service conditions in the context of an application using the vulnerable library. Affected Software/OS: PHP versions 5.2.x prior to 5.2.14 and 5.3.x prior to 5.3.3. Solution: Update to version 5.2.14, 5.3.3 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0397 http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html BugTraq ID: 38708 http://www.securityfocus.com/bid/38708 http://www.mandriva.com/security/advisories?name=MDVSA-2010:068 http://www.openwall.com/lists/oss-security/2010/03/12/5 http://www.redhat.com/support/errata/RHSA-2010-0919.html http://secunia.com/advisories/42410 SuSE Security Announcement: SUSE-SR:2010:012 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html SuSE Security Announcement: SUSE-SR:2010:013 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html SuSE Security Announcement: SUSE-SR:2010:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html http://www.vupen.com/english/advisories/2010/0724 http://www.vupen.com/english/advisories/2010/3081
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.