ID de Prueba:	1.3.6.1.4.1.25623.1.0.804820
Categoría:	Web application abuses
Título:	PHP 5.4.x < 5.4.32, 5.5.x < 5.5.15 Multiple Vulnerabilities (Aug 2014)
Resumen:	PHP is prone to multiple vulnerabilities.
Descripción:	Summary: PHP is prone to multiple vulnerabilities. Vulnerability Insight: The following flaws exist: - CVE-2014-3597: Multiple overflow conditions in the 'php_parserr' function within ext/standard/dns.c script. - CVE-2014-3587: Integer overflow in the 'cdf_read_property_info' function in cdf.c within the Fileinfo component. - CVE-2014-5120: An error in the '_php_image_output_ctx' function within ext/gd/gd_ctx.c script as NULL bytes in paths to various image handling functions are not stripped. Vulnerability Impact: Successful exploitation will allow remote attackers to overwrite arbitrary files, conduct denial of service attacks or potentially execute arbitrary code. Affected Software/OS: PHP version 5.4.x prior to 5.4.32 and 5.5.x prior to 5.5.16. Solution: Update to version 5.4.32, 5.5.16 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3587 http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html BugTraq ID: 69325 http://www.securityfocus.com/bid/69325 Debian Security Information: DSA-3008 (Google Search) http://www.debian.org/security/2014/dsa-3008 Debian Security Information: DSA-3021 (Google Search) http://www.debian.org/security/2014/dsa-3021 RedHat Security Advisories: RHSA-2014:1326 http://rhn.redhat.com/errata/RHSA-2014-1326.html RedHat Security Advisories: RHSA-2014:1327 http://rhn.redhat.com/errata/RHSA-2014-1327.html RedHat Security Advisories: RHSA-2014:1765 http://rhn.redhat.com/errata/RHSA-2014-1765.html RedHat Security Advisories: RHSA-2014:1766 http://rhn.redhat.com/errata/RHSA-2014-1766.html RedHat Security Advisories: RHSA-2016:0760 http://rhn.redhat.com/errata/RHSA-2016-0760.html http://secunia.com/advisories/60609 http://secunia.com/advisories/60696 http://www.ubuntu.com/usn/USN-2344-1 http://www.ubuntu.com/usn/USN-2369-1 Common Vulnerability Exposure (CVE) ID: CVE-2014-3597 BugTraq ID: 69322 http://www.securityfocus.com/bid/69322 SuSE Security Announcement: openSUSE-SU-2014:1133 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-09/msg00024.html SuSE Security Announcement: openSUSE-SU-2014:1245 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-09/msg00055.html Common Vulnerability Exposure (CVE) ID: CVE-2014-5120
Copyright	Copyright (C) 2014 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.