ID de Prueba:	1.3.6.1.4.1.25623.1.0.56607
Categoría:	Mandrake Local Security Checks
Título:	Mandrake Security Advisory MDKSA-2006:035-1 (php)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing an update to php announced via advisory MDKSA-2006:035-1. A flaw in the PHP gd extension in versions prior to 4.4.1 could allow a remote attacker to bypass safe_mode and open_basedir restrictions via unknown attack vectors. Update: A regression was introduced with the backported patch from PHP 4.4.1 that would prevent PHP from creating a new file with imagepng(), imagejpeg(), etc. Thanks to Tibor Pittich for bringing this to our attention. The updated packages have been patched to correct this issue. Affected: 10.2, Corporate 3.0, Multi Network Firewall 2.0 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2006:035-1 http://bugs.php.net/bug.php?id=35071 Risk factor : High CVSS Score: 7.5
Referencia Cruzada:	BugTraq ID: 16907 BugTraq ID: 15411 Common Vulnerability Exposure (CVE) ID: CVE-2005-3391 http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html http://www.securityfocus.com/bid/15411 http://www.securityfocus.com/bid/16907 Cert/CC Advisory: TA06-062A http://www.us-cert.gov/cas/techalerts/TA06-062A.html http://www.gentoo.org/security/en/glsa/glsa-200511-08.xml HPdes Security Advisory: HPSBMA02159 http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522 HPdes Security Advisory: SSRT061238 http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:035 http://www.openpkg.org/security/OpenPKG-SA-2005.027-php.html http://www.osvdb.org/20898 http://secunia.com/advisories/17371 http://secunia.com/advisories/17510 http://secunia.com/advisories/18054 http://secunia.com/advisories/18198 http://secunia.com/advisories/18763 http://secunia.com/advisories/19064 http://secunia.com/advisories/22691 http://securityreason.com/securityalert/525 SuSE Security Announcement: SUSE-SA:2005:069 (Google Search) http://www.securityfocus.com/archive/1/419504/100/0/threaded https://www.ubuntu.com/usn/usn-232-1/ http://www.vupen.com/english/advisories/2005/2254 http://www.vupen.com/english/advisories/2006/0791 http://www.vupen.com/english/advisories/2006/4320
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.