ID de Prueba:	1.3.6.1.4.1.25623.1.0.122693
Categoría:	Oracle Linux Local Security Checks
Título:	Oracle: Security Advisory (ELSA-2007-0348)
Resumen:	The remote host is missing an update for the 'php' package(s) announced via the ELSA-2007-0348 advisory.
Descripción:	Summary: The remote host is missing an update for the 'php' package(s) announced via the ELSA-2007-0348 advisory. Vulnerability Insight: [5.1.6-12.el5] - add security fix for CVE-2007-1864, SOAP redirect handling issue, FTP CRLF injection issue (#235016) [5.1.6-11.el5] - add security fix for CVE-2007-1718 (#235016) [5.1.6-9.el5] - add security fix for CVE-2007-1583 (#235016) - add security fixes for CVE-2007-0455, CVE-2007-1001 (#235036) [5.1.6-7.el5] - add security fix for CVE-2007-1285 (#231597) [5.1.6-6.el5] - add security fixes for: CVE-2007-0906, CVE-2007-0907, CVE-2007-0908, CVE-2007-0909, CVE-2007-0910, CVE-2007-0988 (#229013) Affected Software/OS: 'php' package(s) on Oracle Linux 5. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2007-1864 1018024 http://www.securitytracker.com/id?1018024 2007-0017 http://www.trustix.org/errata/2007/0017/ 23813 http://www.securityfocus.com/bid/23813 25187 http://secunia.com/advisories/25187 25191 http://secunia.com/advisories/25191 25255 http://secunia.com/advisories/25255 25445 http://secunia.com/advisories/25445 25660 http://secunia.com/advisories/25660 25938 http://secunia.com/advisories/25938 25945 http://secunia.com/advisories/25945 26048 http://secunia.com/advisories/26048 26102 http://secunia.com/advisories/26102 27377 http://secunia.com/advisories/27377 34674 http://osvdb.org/34674 ADV-2007-2187 http://www.vupen.com/english/advisories/2007/2187 DSA-1330 http://www.debian.org/security/2007/dsa-1330 DSA-1331 http://www.debian.org/security/2007/dsa-1331 GLSA-200705-19 http://security.gentoo.org/glsa/glsa-200705-19.xml MDKSA-2007:102 http://www.mandriva.com/security/advisories?name=MDKSA-2007:102 MDKSA-2007:103 http://www.mandriva.com/security/advisories?name=MDKSA-2007:103 RHSA-2007:0348 https://rhn.redhat.com/errata/RHSA-2007-0348.html RHSA-2007:0349 http://www.redhat.com/support/errata/RHSA-2007-0349.html RHSA-2007:0355 http://www.redhat.com/support/errata/RHSA-2007-0355.html SUSE-SA:2007:044 http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html USN-485-1 http://www.ubuntu.com/usn/usn-485-1 http://support.avaya.com/elmodocs2/security/ASA-2007-231.htm http://us2.php.net/releases/4_4_7.php http://us2.php.net/releases/5_2_2.php https://issues.rpath.com/browse/RPL-1693 oval:org.mitre.oval:def:11257 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11257 Common Vulnerability Exposure (CVE) ID: CVE-2007-2509 BugTraq ID: 23813 BugTraq ID: 23818 http://www.securityfocus.com/bid/23818 Bugtraq: 20070323 CRLF injection in PHP ftp function (Google Search) http://www.securityfocus.com/archive/1/463596/100/0/threaded Debian Security Information: DSA-1295 (Google Search) http://www.debian.org/security/2007/dsa-1295 Debian Security Information: DSA-1296 (Google Search) http://www.debian.org/security/2007/dsa-1296 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10839 RedHat Security Advisories: RHSA-2007:0348 http://www.redhat.com/support/errata/RHSA-2007-0888.html RedHat Security Advisories: RHSA-2007:0889 http://rhn.redhat.com/errata/RHSA-2007-0889.html http://www.securitytracker.com/id?1018022 http://secunia.com/advisories/25318 http://secunia.com/advisories/25365 http://secunia.com/advisories/25372 http://secunia.com/advisories/26967 http://secunia.com/advisories/27351 http://securityreason.com/securityalert/2672 SuSE Security Announcement: SUSE-SA:2007:044 (Google Search) http://www.ubuntu.com/usn/usn-462-1 XForce ISS Database: php-ftpputcmd-crlf-injection(34413) https://exchange.xforce.ibmcloud.com/vulnerabilities/34413 Common Vulnerability Exposure (CVE) ID: CVE-2007-2510 BugTraq ID: 24034 http://www.securityfocus.com/bid/24034 http://osvdb.org/34675 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10715 http://www.securitytracker.com/id?1018023
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.