ID de Prueba:	1.3.6.1.4.1.25623.1.0.110172
Categoría:	Web application abuses
Título:	PHP < 5.2.7 Multiple Vulnerabilities
Resumen:	PHP is prone to multiple vulnerabilities.
Descripción:	Summary: PHP is prone to multiple vulnerabilities. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2371 20081027 rPSA-2008-0305-1 pcre http://www.securityfocus.com/archive/1/497828/100/0/threaded 30087 http://www.securityfocus.com/bid/30087 30916 http://secunia.com/advisories/30916 30944 http://secunia.com/advisories/30944 30945 http://secunia.com/advisories/30945 30958 http://secunia.com/advisories/30958 30961 http://secunia.com/advisories/30961 30967 http://secunia.com/advisories/30967 30972 http://secunia.com/advisories/30972 30990 http://secunia.com/advisories/30990 31200 http://secunia.com/advisories/31200 31681 http://www.securityfocus.com/bid/31681 32222 http://secunia.com/advisories/32222 32454 http://secunia.com/advisories/32454 32746 http://secunia.com/advisories/32746 35074 http://secunia.com/advisories/35074 35650 http://secunia.com/advisories/35650 39300 http://secunia.com/advisories/39300 ADV-2008-2005 http://www.vupen.com/english/advisories/2008/2005 ADV-2008-2006 http://www.vupen.com/english/advisories/2008/2006 ADV-2008-2336 http://www.vupen.com/english/advisories/2008/2336 ADV-2008-2780 http://www.vupen.com/english/advisories/2008/2780 ADV-2009-1297 http://www.vupen.com/english/advisories/2009/1297 ADV-2010-0833 http://www.vupen.com/english/advisories/2010/0833 APPLE-SA-2008-10-09 http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html APPLE-SA-2009-05-12 http://lists.apple.com/archives/security-announce/2009/May/msg00002.html DSA-1602 http://www.debian.org/security/2008/dsa-1602 FEDORA-2008-6025 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00105.html FEDORA-2008-6048 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00123.html GLSA-200807-03 http://www.gentoo.org/security/en/glsa/glsa-200807-03.xml GLSA-200811-05 http://security.gentoo.org/glsa/glsa-200811-05.xml HPSBUX02431 http://marc.info/?l=bugtraq&m=124654546101607&w=2 HPSBUX02465 http://marc.info/?l=bugtraq&m=125631037611762&w=2 MDVSA-2008:147 http://www.mandriva.com/security/advisories?name=MDVSA-2008:147 MDVSA-2009:023 http://www.mandriva.com/security/advisories?name=MDVSA-2009:023 SSRT090085 SSRT090192 SUSE-SR:2008:014 http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html TA09-133A http://www.us-cert.gov/cas/techalerts/TA09-133A.html USN-624-1 http://www.ubuntu.com/usn/usn-624-1 USN-624-2 http://ubuntu.com/usn/usn-624-2 USN-628-1 http://www.ubuntu.com/usn/usn-628-1 http://bugs.gentoo.org/show_bug.cgi?id=228091 http://ftp.gnome.org/pub/GNOME/sources/glib/2.16/glib-2.16.4.changes http://support.apple.com/kb/HT3216 http://support.apple.com/kb/HT3549 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0305 Common Vulnerability Exposure (CVE) ID: CVE-2008-2665 BugTraq ID: 29797 http://www.securityfocus.com/bid/29797 Bugtraq: 20090302 rPSA-2009-0035-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl (Google Search) http://www.securityfocus.com/archive/1/501376/100/0/threaded Cert/CC Advisory: TA09-133A HPdes Security Advisory: HPSBUX02431 HPdes Security Advisory: HPSBUX02465 HPdes Security Advisory: SSRT090085 HPdes Security Advisory: SSRT090192 http://www.securitytracker.com/id?1020327 http://securityreason.com/securityalert/3941 http://securityreason.com/achievement_securityalert/54 XForce ISS Database: php-posixaccess-security-bypass(43196) https://exchange.xforce.ibmcloud.com/vulnerabilities/43196 Common Vulnerability Exposure (CVE) ID: CVE-2008-2666 BugTraq ID: 29796 http://www.securityfocus.com/bid/29796 http://www.securitytracker.com/id?1020328 http://securityreason.com/securityalert/3942 http://securityreason.com/achievement_securityalert/55 XForce ISS Database: php-chdir-ftoc-security-bypass(43198) https://exchange.xforce.ibmcloud.com/vulnerabilities/43198 Common Vulnerability Exposure (CVE) ID: CVE-2008-2829 BugTraq ID: 29829 http://www.securityfocus.com/bid/29829 https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:126 http://www.mandriva.com/security/advisories?name=MDVSA-2008:127 http://www.mandriva.com/security/advisories?name=MDVSA-2008:128 http://bugs.php.net/bug.php?id=42862 http://www.openwall.com/lists/oss-security/2008/06/19/6 http://www.openwall.com/lists/oss-security/2008/06/24/2 http://osvdb.org/46641 http://secunia.com/advisories/35306 SuSE Security Announcement: SUSE-SR:2008:027 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html XForce ISS Database: php-phpimap-dos(43357) https://exchange.xforce.ibmcloud.com/vulnerabilities/43357 Common Vulnerability Exposure (CVE) ID: CVE-2008-3658 BugTraq ID: 30649 http://www.securityfocus.com/bid/30649 Debian Security Information: DSA-1647 (Google Search) http://www.debian.org/security/2008/dsa-1647 HPdes Security Advisory: HPSBTU02382 http://www.securityfocus.com/archive/1/498647/100/0/threaded HPdes Security Advisory: HPSBUX02401 http://marc.info/?l=bugtraq&m=123376588623823&w=2 HPdes Security Advisory: SSRT080132 HPdes Security Advisory: SSRT090005 http://www.mandriva.com/security/advisories?name=MDVSA-2009:021 http://www.mandriva.com/security/advisories?name=MDVSA-2009:022 http://www.mandriva.com/security/advisories?name=MDVSA-2009:024 http://news.php.net/php.cvs/51219 http://www.openwall.com/lists/oss-security/2008/08/08/2 http://www.openwall.com/lists/oss-security/2008/08/13/8 http://osvdb.org/47484 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9724 http://www.redhat.com/support/errata/RHSA-2009-0350.html http://secunia.com/advisories/31982 http://secunia.com/advisories/32148 http://secunia.com/advisories/32316 http://secunia.com/advisories/32884 http://secunia.com/advisories/33797 SuSE Security Announcement: SUSE-SR:2008:018 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html SuSE Security Announcement: SUSE-SR:2008:021 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html http://www.vupen.com/english/advisories/2008/3275 http://www.vupen.com/english/advisories/2009/0320 XForce ISS Database: php-imageloadfont-dos(44401) https://exchange.xforce.ibmcloud.com/vulnerabilities/44401 Common Vulnerability Exposure (CVE) ID: CVE-2008-3659 http://www.openwall.com/lists/oss-security/2008/08/08/3 http://www.openwall.com/lists/oss-security/2008/08/08/4 http://osvdb.org/47483 http://www.securitytracker.com/id?1020995 XForce ISS Database: php-memnstr-bo(44405) https://exchange.xforce.ibmcloud.com/vulnerabilities/44405 Common Vulnerability Exposure (CVE) ID: CVE-2008-3660 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9597 http://www.securitytracker.com/id?1020994 XForce ISS Database: php-curl-unspecified(44402) https://exchange.xforce.ibmcloud.com/vulnerabilities/44402 Common Vulnerability Exposure (CVE) ID: CVE-2008-5557 BugTraq ID: 32948 http://www.securityfocus.com/bid/32948 Debian Security Information: DSA-1789 (Google Search) http://www.debian.org/security/2009/dsa-1789 http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0477.html HPdes Security Advisory: HPSBMA02492 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444 HPdes Security Advisory: SSRT100079 http://www.mandriva.com/security/advisories?name=MDVSA-2009:045 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10286 http://securitytracker.com/id?1021482 http://secunia.com/advisories/34642 http://secunia.com/advisories/35003 SuSE Security Announcement: SUSE-SR:2009:004 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html SuSE Security Announcement: SUSE-SR:2009:008 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html XForce ISS Database: php-multibyte-bo(47525) https://exchange.xforce.ibmcloud.com/vulnerabilities/47525 Common Vulnerability Exposure (CVE) ID: CVE-2008-5624 BugTraq ID: 32688 http://www.securityfocus.com/bid/32688 Bugtraq: 20081206 SecurityReason: PHP 5.2.6 SAPI php_getuid() overload (Google Search) http://www.securityfocus.com/archive/1/498985/100/0/threaded http://osvdb.org/50483 http://osvdb.org/52207 http://securityreason.com/achievement_securityalert/59 XForce ISS Database: php-getuid-safemode-bypass(47318) https://exchange.xforce.ibmcloud.com/vulnerabilities/47318 Common Vulnerability Exposure (CVE) ID: CVE-2008-5625 BugTraq ID: 32383 http://www.securityfocus.com/bid/32383 Bugtraq: 20081120 SecurityReason : PHP 5.2.6 (error_log) safe_mode bypass (Google Search) http://archives.neohapsis.com/archives/bugtraq/2008-11/0152.html https://www.exploit-db.com/exploits/7171 http://osvdb.org/52205 http://securityreason.com/achievement_securityalert/57 XForce ISS Database: php-error-safemode-bypass(47314) https://exchange.xforce.ibmcloud.com/vulnerabilities/47314 Common Vulnerability Exposure (CVE) ID: CVE-2008-5658 BugTraq ID: 32625 http://www.securityfocus.com/bid/32625 Bugtraq: 20081204 Advisory 06/2008: PHP ZipArchive::extractTo() Directory Traversal Vulnerability (Google Search) http://archives.neohapsis.com/archives/bugtraq/2008-12/0039.html http://www.sektioneins.de/advisories/SE-2008-06.txt http://www.openwall.com/lists/oss-security/2008/12/04/3 http://osvdb.org/50480 http://www.securitytracker.com/id?1021303 XForce ISS Database: php-ziparchive-directory-traversal(47079) https://exchange.xforce.ibmcloud.com/vulnerabilities/47079
Copyright	Copyright (C) 2012 NopSec Inc.

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.