ID de Prueba:	1.3.6.1.4.1.25623.1.0.805656
Categoría:	Web application abuses
Título:	PHP < 5.4.40, 5.5.x < 5.5.24, 5.6.x < 5.6.8 Multiple Vulnerabilities - Windows
Resumen:	PHP is prone to multiple vulnerabilities.
Descripción:	Summary: PHP is prone to multiple vulnerabilities. Vulnerability Insight: The following flaws exist: - Multiple stack-based buffer overflows in the 'phar_set_inode' function in phar_internal.h script in PHP. - Vulnerabilities in 'phar_parse_metadata' and 'phar_parse_pharfile' functions in ext/phar/phar.c script in PHP. - A NULL pointer dereference flaw in the 'build_tablename' function in 'ext/pgsql/pgsql.c' script that is triggered when handling NULL return values for 'token' Vulnerability Impact: Successfully exploiting these issues allow remote attackers to cause a denial of service, to obtain sensitive information from process memory and to execute arbitrary code via crafted dimensions. Affected Software/OS: PHP prior to version 5.4.40, 5.5.x prior to 5.5.24 and 5.6.x prior to 5.6.8. Solution: Update to version 5.4.40, 5.5.24, 5.6.8 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1352 http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html BugTraq ID: 71932 http://www.securityfocus.com/bid/71932 https://security.gentoo.org/glsa/201606-10 HPdes Security Advisory: HPSBUX03337 http://marc.info/?l=bugtraq&m=143403519711434&w=2 HPdes Security Advisory: SSRT102066 http://www.mandriva.com/security/advisories?name=MDVSA-2015:079 http://openwall.com/lists/oss-security/2015/01/24/9 RedHat Security Advisories: RHSA-2015:1053 http://rhn.redhat.com/errata/RHSA-2015-1053.html Common Vulnerability Exposure (CVE) ID: CVE-2015-2783 http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html BugTraq ID: 74239 http://www.securityfocus.com/bid/74239 Debian Security Information: DSA-3280 (Google Search) http://www.debian.org/security/2015/dsa-3280 RedHat Security Advisories: RHSA-2015:1066 http://rhn.redhat.com/errata/RHSA-2015-1066.html RedHat Security Advisories: RHSA-2015:1135 http://rhn.redhat.com/errata/RHSA-2015-1135.html RedHat Security Advisories: RHSA-2015:1186 http://rhn.redhat.com/errata/RHSA-2015-1186.html RedHat Security Advisories: RHSA-2015:1187 http://rhn.redhat.com/errata/RHSA-2015-1187.html RedHat Security Advisories: RHSA-2015:1218 http://rhn.redhat.com/errata/RHSA-2015-1218.html http://www.securitytracker.com/id/1032146 SuSE Security Announcement: SUSE-SU-2015:0868 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html SuSE Security Announcement: openSUSE-SU-2015:0855 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html http://www.ubuntu.com/usn/USN-2572-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-3307 BugTraq ID: 74703 http://www.securityfocus.com/bid/74703 Common Vulnerability Exposure (CVE) ID: CVE-2015-3329 BugTraq ID: 74240 http://www.securityfocus.com/bid/74240 http://www.securitytracker.com/id/1032145 Common Vulnerability Exposure (CVE) ID: CVE-2015-3411 BugTraq ID: 75255 http://www.securityfocus.com/bid/75255 http://www.securitytracker.com/id/1032709 Common Vulnerability Exposure (CVE) ID: CVE-2015-3412 BugTraq ID: 75250 http://www.securityfocus.com/bid/75250 Common Vulnerability Exposure (CVE) ID: CVE-2015-4599 BugTraq ID: 75251 http://www.securityfocus.com/bid/75251 http://www.openwall.com/lists/oss-security/2015/06/16/12 Common Vulnerability Exposure (CVE) ID: CVE-2015-4600 BugTraq ID: 74413 http://www.securityfocus.com/bid/74413 Common Vulnerability Exposure (CVE) ID: CVE-2015-4602 BugTraq ID: 75249 http://www.securityfocus.com/bid/75249 Common Vulnerability Exposure (CVE) ID: CVE-2015-4603 BugTraq ID: 75252 http://www.securityfocus.com/bid/75252 Common Vulnerability Exposure (CVE) ID: CVE-2015-4604 BugTraq ID: 75241 http://www.securityfocus.com/bid/75241 Common Vulnerability Exposure (CVE) ID: CVE-2015-4605 BugTraq ID: 75233 http://www.securityfocus.com/bid/75233
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.