ID de Prueba:	1.3.6.1.4.1.25623.1.0.100606
Categoría:	Web application abuses
Título:	PHP <= 4.4.4 / 5.0 <= 5.2.0 Multiple Vulnerabilities
Resumen:	PHP is prone to multiple security vulnerabilities.
Descripción:	Summary: PHP is prone to multiple security vulnerabilities. Vulnerability Impact: Successful exploits could allow an attacker to write files in unauthorized locations, cause a denial of service (DoS) condition, and potentially execute code. Affected Software/OS: PHP versions 4.x through 4.4.4 and 5.x through 5.2.0. Other versions may also be vulnerable. Solution: The vendor has released updates to address these issues. Contact the vendor for details on obtaining and applying the appropriate updates. Please see the advisories for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-0905 BugTraq ID: 22496 http://www.securityfocus.com/bid/22496 http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html http://osvdb.org/32768 http://secunia.com/advisories/24089 http://secunia.com/advisories/24419 http://www.trustix.org/errata/2007/0009/ http://www.vupen.com/english/advisories/2007/0546 Common Vulnerability Exposure (CVE) ID: CVE-2007-0906 Bugtraq: 20070227 rPSA-2007-0043-1 php php-mysql php-pgsql (Google Search) http://www.securityfocus.com/archive/1/461462/100/0/threaded Bugtraq: 20070418 rPSA-2007-0073-1 php php-mysql php-pgsql (Google Search) http://www.securityfocus.com/archive/1/466166/100/0/threaded Debian Security Information: DSA-1264 (Google Search) http://www.us.debian.org/security/2007/dsa-1264 http://security.gentoo.org/glsa/glsa-200703-21.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:048 http://www.osvdb.org/32776 http://osvdb.org/34706 http://osvdb.org/34707 http://osvdb.org/34708 http://osvdb.org/34709 http://osvdb.org/34710 http://osvdb.org/34711 http://osvdb.org/34712 http://osvdb.org/34713 http://osvdb.org/34714 http://osvdb.org/34715 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8992 http://www.redhat.com/support/errata/RHSA-2007-0076.html http://www.redhat.com/support/errata/RHSA-2007-0081.html http://www.redhat.com/support/errata/RHSA-2007-0082.html http://www.redhat.com/support/errata/RHSA-2007-0088.html RedHat Security Advisories: RHSA-2007:0089 http://rhn.redhat.com/errata/RHSA-2007-0089.html http://www.securitytracker.com/id?1017671 http://secunia.com/advisories/24195 http://secunia.com/advisories/24217 http://secunia.com/advisories/24236 http://secunia.com/advisories/24248 http://secunia.com/advisories/24284 http://secunia.com/advisories/24295 http://secunia.com/advisories/24322 http://secunia.com/advisories/24421 http://secunia.com/advisories/24432 http://secunia.com/advisories/24514 http://secunia.com/advisories/24606 http://secunia.com/advisories/24642 http://secunia.com/advisories/24945 http://secunia.com/advisories/26048 SGI Security Advisory: 20070201-01-P ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc SuSE Security Announcement: SUSE-SA:2007:020 (Google Search) http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html SuSE Security Announcement: SUSE-SA:2007:044 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html http://www.ubuntu.com/usn/usn-424-1 http://www.ubuntu.com/usn/usn-424-2 Common Vulnerability Exposure (CVE) ID: CVE-2007-0907 http://osvdb.org/32767 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11321 Common Vulnerability Exposure (CVE) ID: CVE-2007-0908 BugTraq ID: 22806 http://www.securityfocus.com/bid/22806 http://www.php-security.org/MOPB/MOPB-11-2007.html http://osvdb.org/32766 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11185 http://securityreason.com/securityalert/2321 XForce ISS Database: php-wddx-information-disclosure(32493) https://exchange.xforce.ibmcloud.com/vulnerabilities/32493 Common Vulnerability Exposure (CVE) ID: CVE-2007-0909 http://osvdb.org/32764 http://osvdb.org/32765 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9722 Common Vulnerability Exposure (CVE) ID: CVE-2007-0910 http://osvdb.org/32763 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9514
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.