ID de Prueba:	1.3.6.1.4.1.25623.1.0.110173
Categoría:	Web application abuses
Título:	PHP < 5.2.0 Multiple Vulnerabilities
Resumen:	PHP is prone to multiple vulnerabilities.
Descripción:	Summary: PHP is prone to multiple vulnerabilities. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-1015 BugTraq ID: 16878 http://www.securityfocus.com/bid/16878 Bugtraq: 20060301 Re: (PHP) mb_send_mail security bypass (Google Search) http://www.securityfocus.com/archive/1/426497/100/0/threaded http://secunia.com/advisories/19979 http://securityreason.com/securityalert/517 SuSE Security Announcement: SUSE-SA:2006:024 (Google Search) http://www.novell.com/linux/security/advisories/05-05-2006.html Common Vulnerability Exposure (CVE) ID: CVE-2006-1549 BugTraq ID: 22766 http://www.securityfocus.com/bid/22766 Bugtraq: 20060409 function *() php/apache Crash PHP 4.4.2 and 5.1.2 (Google Search) http://www.securityfocus.com/archive/1/430453/100/0/threaded Bugtraq: 20060412 Re: function *() php/apache Crash PHP 4.4.2 and 5.1.2 (Google Search) http://www.securityfocus.com/archive/1/430598/100/0/threaded http://www.securityfocus.com/archive/1/430742/100/0/threaded Bugtraq: 20060414 Re: Re: function *() php/apache Crash PHP 4.4.2 and 5.1.2 (Google Search) http://www.securityfocus.com/archive/1/431018/100/0/threaded http://www.php-security.org/MOPB/MOPB-02-2007.html http://www.osvdb.org/24485 http://securitytracker.com/id?1015880 http://securityreason.com/securityalert/2312 http://securityreason.com/securityalert/676 http://securityreason.com/achievement_securityalert/35 http://www.vupen.com/english/advisories/2006/1290 XForce ISS Database: php-function-dos(25704) https://exchange.xforce.ibmcloud.com/vulnerabilities/25704 Common Vulnerability Exposure (CVE) ID: CVE-2006-2660 Bugtraq: 20060611 tempnam() Bypass unique file name PHP 5.1.4 (Google Search) http://www.securityfocus.com/archive/1/436785/100/0/threaded http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0209.html http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 http://securitytracker.com/id?1016271 http://secunia.com/advisories/21125 http://securityreason.com/securityalert/1069 http://www.ubuntu.com/usn/usn-320-1 XForce ISS Database: php-tempnam-bypass(27049) https://exchange.xforce.ibmcloud.com/vulnerabilities/27049 Common Vulnerability Exposure (CVE) ID: CVE-2006-4486 BugTraq ID: 19582 http://www.securityfocus.com/bid/19582 Bugtraq: 20061005 rPSA-2006-0182-1 php php-mysql php-pgsql (Google Search) http://www.securityfocus.com/archive/1/447866/100/0/threaded Debian Security Information: DSA-1331 (Google Search) http://www.debian.org/security/2007/dsa-1331 http://www.hardened-php.net/hphp/changelog.html#hardening_patch_0.4.14 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11086 http://www.redhat.com/support/errata/RHSA-2006-0669.html http://www.redhat.com/support/errata/RHSA-2006-0682.html RedHat Security Advisories: RHSA-2006:0688 http://rhn.redhat.com/errata/RHSA-2006-0688.html http://securitytracker.com/id?1016984 http://secunia.com/advisories/21546 http://secunia.com/advisories/22004 http://secunia.com/advisories/22069 http://secunia.com/advisories/22225 http://secunia.com/advisories/22331 http://secunia.com/advisories/22440 http://secunia.com/advisories/22487 http://secunia.com/advisories/22538 http://secunia.com/advisories/25945 SGI Security Advisory: 20061001-01-P ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc SuSE Security Announcement: SUSE-SA:2006:052 (Google Search) http://www.novell.com/linux/security/advisories/2006_52_php.html TurboLinux Advisory: TLSA-2006-38 http://www.turbolinux.com/security/2006/TLSA-2006-38.txt http://www.ubuntu.com/usn/usn-362-1 Common Vulnerability Exposure (CVE) ID: CVE-2006-4625 BugTraq ID: 19933 http://www.securityfocus.com/bid/19933 Bugtraq: 20060913 Re: PHP 5.1.6 / 4.4.4 Critical php_admin* bypass by ini_restore() (Google Search) http://www.securityfocus.com/archive/1/445712/100/0/threaded http://www.securityfocus.com/archive/1/445882/100/0/threaded HPdes Security Advisory: HPSBMA02215 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 HPdes Security Advisory: HPSBTU02232 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 HPdes Security Advisory: SSRT071423 HPdes Security Advisory: SSRT071429 http://www.mandriva.com/security/advisories?name=MDKSA-2006:185 http://www.securityfocus.com/archive/1/448953/100/0/threaded http://secunia.com/advisories/22282 http://secunia.com/advisories/22338 http://secunia.com/advisories/22424 http://secunia.com/advisories/25423 http://secunia.com/advisories/25850 http://securityreason.com/securityalert/1519 http://securityreason.com/achievement_securityalert/42 SuSE Security Announcement: SUSE-SA:2006:059 (Google Search) http://lists.suse.com/archive/suse-security-announce/2006-Oct/0002.html http://www.vupen.com/english/advisories/2007/1991 http://www.vupen.com/english/advisories/2007/2374 XForce ISS Database: php-inirestore-security-bypass(28853) https://exchange.xforce.ibmcloud.com/vulnerabilities/28853 Common Vulnerability Exposure (CVE) ID: CVE-2006-4812 1016984 1691 http://securityreason.com/securityalert/1691 2006-0055 http://www.trustix.org/errata/2006/0055 20061009 Advisory 09/2006: PHP unserialize() Array Creation Integer Overflow http://www.securityfocus.com/archive/1/448014/100/0/threaded 20349 http://www.securityfocus.com/bid/20349 22280 http://secunia.com/advisories/22280 22281 http://secunia.com/advisories/22281 22300 http://secunia.com/advisories/22300 22331 22338 22533 http://secunia.com/advisories/22533 22538 22650 http://secunia.com/advisories/22650 ADV-2006-3922 http://www.vupen.com/english/advisories/2006/3922 GLSA-200610-14 http://www.gentoo.org/security/en/glsa/glsa-200610-14.xml OpenPKG-SA-2006.023 RHSA-2006:0688 RHSA-2006:0708 http://rhn.redhat.com/errata/RHSA-2006-0708.html SUSE-SA:2006:059 USN-362-1 http://cvs.php.net/viewvc.cgi/ZendEngine2/zend_alloc.c?r1=1.161&r2=1.162 http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm http://support.avaya.com/elmodocs2/security/ASA-2006-234.htm http://www.hardened-php.net/advisory_092006.133.html http://www.hardened-php.net/files/CVE-2006-4812.patch php-ecalloc-integer-overflow(29362) https://exchange.xforce.ibmcloud.com/vulnerabilities/29362 Common Vulnerability Exposure (CVE) ID: CVE-2006-5465 http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html BugTraq ID: 20879 http://www.securityfocus.com/bid/20879 Bugtraq: 20061102 Advisory 13/2006: PHP HTML Entity Encoder Heap Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/450431/100/0/threaded Bugtraq: 20061109 rPSA-2006-0205-1 php php-mysql php-pgsql (Google Search) http://www.securityfocus.com/archive/1/451098/100/0/threaded Bugtraq: 20061129 SYM06-023, Symantec NetBackup PureDisk: PHP update to Address Reported Security Vulnerability (Google Search) http://www.securityfocus.com/archive/1/453024/100/0/threaded Cert/CC Advisory: TA06-333A http://www.us-cert.gov/cas/techalerts/TA06-333A.html Cisco Security Advisory: 20070425 Cisco Applied Intelligence Response: Identifying and Mitigating Exploitation of the PHP HTML Entity Encoder Heap Overflow Vulnerability in Multiple Web-Based Management Interfaces http://www.cisco.com/warp/public/707/cisco-air-20070425-http.shtml Cisco Security Advisory: 20070425 PHP HTML Entity Encoder Heap Overflow Vulnerability in Multiple Web-Based Management Interfaces http://www.cisco.com/en/US/products/products_security_response09186a008082c4fe.html Debian Security Information: DSA-1206 (Google Search) http://www.debian.org/security/2006/dsa-1206 http://security.gentoo.org/glsa/glsa-200703-21.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:196 http://www.hardened-php.net/advisory_132006.138.html http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.028.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10240 http://www.redhat.com/support/errata/RHSA-2006-0730.html http://www.redhat.com/support/errata/RHSA-2006-0731.html RedHat Security Advisories: RHSA-2006:0736 http://rhn.redhat.com/errata/RHSA-2006-0736.html http://securitytracker.com/id?1017152 http://securitytracker.com/id?1017296 http://secunia.com/advisories/22653 http://secunia.com/advisories/22685 http://secunia.com/advisories/22688 http://secunia.com/advisories/22693 http://secunia.com/advisories/22713 http://secunia.com/advisories/22753 http://secunia.com/advisories/22759 http://secunia.com/advisories/22779 http://secunia.com/advisories/22881 http://secunia.com/advisories/22929 http://secunia.com/advisories/23139 http://secunia.com/advisories/23155 http://secunia.com/advisories/23247 http://secunia.com/advisories/24606 http://secunia.com/advisories/25047 SGI Security Advisory: 20061101-01-P ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P SuSE Security Announcement: SUSE-SA:2006:067 (Google Search) http://www.novell.com/linux/security/advisories/2006_67_php.html http://www.trustix.org/errata/2006/0061/ http://www.ubuntu.com/usn/usn-375-1 http://www.vupen.com/english/advisories/2006/4317 http://www.vupen.com/english/advisories/2006/4749 http://www.vupen.com/english/advisories/2006/4750 http://www.vupen.com/english/advisories/2007/1546 XForce ISS Database: php-htmlentities-bo(29971) https://exchange.xforce.ibmcloud.com/vulnerabilities/29971 Common Vulnerability Exposure (CVE) ID: CVE-2006-5706 http://www.php.net/releases/5_2_0.php Common Vulnerability Exposure (CVE) ID: CVE-2006-7205 http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-04-02 http://www.osvdb.org/24945 http://securitytracker.com/id?1015979 Common Vulnerability Exposure (CVE) ID: CVE-2007-0448 BugTraq ID: 22261 http://www.securityfocus.com/bid/22261 http://securityreason.com/securityalert/2175 http://securityreason.com/achievement_securityalert/44 Common Vulnerability Exposure (CVE) ID: CVE-2007-1381 http://www.php-security.org/MOPB/MOPB-09-2007.html http://www.osvdb.org/32775 Common Vulnerability Exposure (CVE) ID: CVE-2007-1584 https://www.exploit-db.com/exploits/3517 http://www.php-security.org/MOPB/MOPB-25-2007.html Common Vulnerability Exposure (CVE) ID: CVE-2007-1888 http://www.mandriva.com/security/advisories?name=MDKSA-2007:091 http://www.php-security.org/MOPB/MOPB-41-2007.html http://www.sqlite.org/cvstrac/rlog?f=sqlite/src/encode.c http://osvdb.org/39177 http://secunia.com/advisories/25057 http://www.ubuntu.com/usn/usn-455-1 http://www.attrition.org/pipermail/vim/2007-April/001540.html XForce ISS Database: sqlite-sqlitedecodebinary-bo(38518) https://exchange.xforce.ibmcloud.com/vulnerabilities/38518 Common Vulnerability Exposure (CVE) ID: CVE-2007-2844 BugTraq ID: 24109 http://www.securityfocus.com/bid/24109 http://blog.php-security.org/archives/82-Suhosin-0.9.20-and-crypt-Thread-Safety-Vulnerability.html http://osvdb.org/36088 http://secunia.com/advisories/25434 XForce ISS Database: php-crypt-authentication-bypass(34601) https://exchange.xforce.ibmcloud.com/vulnerabilities/34601 Common Vulnerability Exposure (CVE) ID: CVE-2007-5424 Bugtraq: 20071010 Vulnerabilities digest (Google Search) http://www.securityfocus.com/archive/1/482006/100/0/threaded http://securityvulns.com/news/PHP/alias-pb.html http://securityvulns.ru/Sdocument67.html http://securityreason.com/securityalert/3216
Copyright	Copyright (C) 2012 NopSec Inc.

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.