ID de Prueba:	1.3.6.1.4.1.25623.1.0.805658
Categoría:	Web application abuses
Título:	PHP Multiple Vulnerabilities - 04 (Jun 2015) - Linux
Resumen:	PHP is prone to multiple vulnerabilities.
Descripción:	Summary: PHP is prone to multiple vulnerabilities. Vulnerability Insight: The flaw is due to vulnerability in 'php_handler' function in sapi/apache2handler/sapi_apache2.c script in PHP. Vulnerability Impact: Successfully exploiting this issue allow remote attackers to cause a denial of service or possibly execute arbitrary code via pipelined HTTP requests. Affected Software/OS: PHP versions before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8. Solution: Update to PHP 5.4.40 or 5.5.24 or 5.6.8 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-3330 http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html BugTraq ID: 74204 http://www.securityfocus.com/bid/74204 https://security.gentoo.org/glsa/201606-10 http://openwall.com/lists/oss-security/2015/04/17/7 RedHat Security Advisories: RHSA-2015:1066 http://rhn.redhat.com/errata/RHSA-2015-1066.html RedHat Security Advisories: RHSA-2015:1135 http://rhn.redhat.com/errata/RHSA-2015-1135.html RedHat Security Advisories: RHSA-2015:1186 http://rhn.redhat.com/errata/RHSA-2015-1186.html RedHat Security Advisories: RHSA-2015:1187 http://rhn.redhat.com/errata/RHSA-2015-1187.html http://www.securitytracker.com/id/1033703 SuSE Security Announcement: SUSE-SU-2015:0868 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00005.html SuSE Security Announcement: openSUSE-SU-2015:0855 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00004.html http://www.ubuntu.com/usn/USN-2572-1
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.