English | Deutsch | Español | Português
 UserID:
 Passwd:
new user
 About:   Dedicated  | Advanced  | Standard  | Recurring  | No Risk  | Desktop  | Basic  | Single  | Security Seal  | FAQ
  Price/Feature Summary  | Order  | New Vulnerabilities  | Confidentiality  | Vulnerability Search
 Vulnerability   
Search   
    Search 92446 CVE descriptions
and 51095 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.58803
Category:FreeBSD Local Security Checks
Title:FreeBSD Ports: php5
Summary:FreeBSD Ports: php5
Description:Description:
The remote host is missing an update to the system
as announced in the referenced advisory.

The following packages are affected:
php5
php4

Solution:
Update your system with the appropriate patches or
software upgrades.

http://www.php.net/releases/5_2_4.php
http://secunia.com/advisories/26642
http://www.vuxml.org/freebsd/71d903fc-602d-11dc-898c-001921ab2fa4.html

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2007-2872
Bugtraq: 20070601 SEC Consult SA-20070601-0 :: PHP chunk_split() integer overflow (Google Search)
http://www.securityfocus.com/archive/1/archive/1/470244/100/0/threaded
http://www.sec-consult.com/291.html
https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.html
https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00397.html
http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml
HPdes Security Advisory: HPSBUX02262
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795
HPdes Security Advisory: SSRT071447
HPdes Security Advisory: HPSBUX02308
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501
HPdes Security Advisory: SSRT080010
HPdes Security Advisory: HPSBUX02332
http://www.securityfocus.com/archive/1/archive/1/491693/100/0/threaded
HPdes Security Advisory: SSRT080056
http://www.mandriva.com/security/advisories?name=MDKSA-2007:187
http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.020.html
http://www.redhat.com/support/errata/RHSA-2007-0890.html
RedHat Security Advisories: RHSA-2007:0889
http://rhn.redhat.com/errata/RHSA-2007-0889.html
http://www.redhat.com/support/errata/RHSA-2007-0888.html
http://www.redhat.com/support/errata/RHSA-2007-0891.html
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.482863
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136
SuSE Security Announcement: SUSE-SA:2007:044 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
SuSE Security Announcement: SUSE-SA:2008:004 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html
http://www.trustix.org/errata/2007/0023/
http://www.ubuntulinux.org/support/documentation/usn/usn-549-1
http://www.ubuntu.com/usn/usn-549-2
BugTraq ID: 24261
http://www.securityfocus.com/bid/24261
http://osvdb.org/36083
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9424
http://www.vupen.com/english/advisories/2007/2061
http://www.vupen.com/english/advisories/2007/3386
http://www.vupen.com/english/advisories/2008/0398
http://www.securitytracker.com/id?1018186
http://secunia.com/advisories/25535
http://secunia.com/advisories/25456
http://secunia.com/advisories/26048
http://secunia.com/advisories/26231
http://secunia.com/advisories/26838
http://secunia.com/advisories/26930
http://secunia.com/advisories/26871
http://secunia.com/advisories/26895
http://secunia.com/advisories/26967
http://secunia.com/advisories/27037
http://secunia.com/advisories/27110
http://secunia.com/advisories/27351
http://secunia.com/advisories/27377
http://secunia.com/advisories/27545
http://secunia.com/advisories/27102
http://secunia.com/advisories/27864
http://secunia.com/advisories/28318
http://secunia.com/advisories/28658
http://secunia.com/advisories/28750
http://secunia.com/advisories/28936
http://secunia.com/advisories/30040
http://www.vupen.com/english/advisories/2008/0059
XForce ISS Database: php-chunksplit-security-bypass(39398)
http://xforce.iss.net/xforce/xfdb/39398
Common Vulnerability Exposure (CVE) ID: CVE-2007-3378
Bugtraq: 20070627 PHP 4/5 htaccess safemode and open_basedir Bypass (Google Search)
http://www.securityfocus.com/archive/1/archive/1/472343/100/0/threaded
http://securityreason.com/achievement_exploitalert/9
http://securityreason.com/achievement_securityalert/45
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
http://www.trustix.org/errata/2007/0026/
BugTraq ID: 24661
http://www.securityfocus.com/bid/24661
BugTraq ID: 25498
http://www.securityfocus.com/bid/25498
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6056
http://www.vupen.com/english/advisories/2007/3023
http://www.vupen.com/english/advisories/2008/0924/references
http://www.osvdb.org/38682
http://secunia.com/advisories/26642
http://secunia.com/advisories/26822
http://secunia.com/advisories/27648
http://secunia.com/advisories/29420
http://securityreason.com/securityalert/2831
http://securityreason.com/securityalert/3389
XForce ISS Database: php-htaccess-security-bypass(35102)
http://xforce.iss.net/xforce/xfdb/35102
XForce ISS Database: php-sessionsavepath-errorlog-security-bypass(39403)
http://xforce.iss.net/xforce/xfdb/39403
Common Vulnerability Exposure (CVE) ID: CVE-2007-3806
http://www.exploit-db.com/exploits/4181
http://www.milw0rm.com/exploits/4181
http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.166&r2=1.167
http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?view=log
Debian Security Information: DSA-1578 (Google Search)
http://www.debian.org/security/2008/dsa-1578
Debian Security Information: DSA-1572 (Google Search)
http://www.debian.org/security/2008/dsa-1572
BugTraq ID: 24922
http://www.securityfocus.com/bid/24922
http://osvdb.org/36085
http://www.vupen.com/english/advisories/2007/2547
http://secunia.com/advisories/26085
http://secunia.com/advisories/30288
http://secunia.com/advisories/30158
XForce ISS Database: php-glob-security-bypass(35437)
http://xforce.iss.net/xforce/xfdb/35437
Common Vulnerability Exposure (CVE) ID: CVE-2007-3996
http://secweb.se/en/advisories/php-imagecopyresized-integer-overflow/
http://secweb.se/en/advisories/php-imagecreatetruecolor-integer-overflow/
Debian Security Information: DSA-1613 (Google Search)
http://www.debian.org/security/2008/dsa-1613
http://security.gentoo.org/glsa/glsa-200712-13.xml
http://www.ubuntu.com/usn/usn-557-1
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11147
http://secunia.com/advisories/28009
http://secunia.com/advisories/28147
http://secunia.com/advisories/31168
http://securityreason.com/securityalert/3103
XForce ISS Database: php-gdimagecopyresized-bo(36383)
http://xforce.iss.net/xforce/xfdb/36383
XForce ISS Database: php-gdimagecreate-bo(36382)
http://xforce.iss.net/xforce/xfdb/36382
Common Vulnerability Exposure (CVE) ID: CVE-2007-3997
http://www.milw0rm.com/exploits/4392
http://secweb.se/en/advisories/php-mysql-safe-mode-bypass-vulnerability/
http://securityreason.com/securityalert/3102
XForce ISS Database: php-local-infile-security-bypass(36384)
http://xforce.iss.net/xforce/xfdb/36384
XForce ISS Database: php-localinfile-mysql-security-bypass(39402)
http://xforce.iss.net/xforce/xfdb/39402
Common Vulnerability Exposure (CVE) ID: CVE-2007-3998
http://secweb.se/en/advisories/php-wordwrap-vulnerability/
Debian Security Information: DSA-1444 (Google Search)
http://www.debian.org/security/2008/dsa-1444
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10603
http://secunia.com/advisories/28249
Common Vulnerability Exposure (CVE) ID: CVE-2007-4652
XForce ISS Database: php-session-security-bypass(36387)
http://xforce.iss.net/xforce/xfdb/36387
Common Vulnerability Exposure (CVE) ID: CVE-2007-4657
http://secweb.se/en/advisories/php-strcspn-information-leak-vulnerability/
XForce ISS Database: php-strcspn-overflow(36388)
http://xforce.iss.net/xforce/xfdb/36388
XForce ISS Database: php-strcspn-strspn-unspecified(39399)
http://xforce.iss.net/xforce/xfdb/39399
Common Vulnerability Exposure (CVE) ID: CVE-2007-4658
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10363
XForce ISS Database: php-moneyformat-unspecified(36377)
http://xforce.iss.net/xforce/xfdb/36377
Common Vulnerability Exposure (CVE) ID: CVE-2007-4659
XForce ISS Database: php-zendalterinientry-unspecified(36380)
http://xforce.iss.net/xforce/xfdb/36380
Common Vulnerability Exposure (CVE) ID: CVE-2007-4660
http://www.mandriva.com/security/advisories?name=MDVSA-2008:125
http://www.mandriva.com/security/advisories?name=MDVSA-2008:126
Common Vulnerability Exposure (CVE) ID: CVE-2007-4661
http://cvs.php.net/viewvc.cgi/php-src/ext/standard/string.c?r1=1.445.2.14.2.58&r2=1.445.2.14.2.59
Common Vulnerability Exposure (CVE) ID: CVE-2007-4662
XForce ISS Database: php-phpopensslmakereq-bo(36390)
http://xforce.iss.net/xforce/xfdb/36390
Common Vulnerability Exposure (CVE) ID: CVE-2007-4663
XForce ISS Database: php-glob-security-bypass(36386)
http://xforce.iss.net/xforce/xfdb/36386
Common Vulnerability Exposure (CVE) ID: CVE-2007-4670
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11028
CopyrightCopyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 51095 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.

New User Registration
Email:
UserID:
Passwd:
Please email me your monthly newsletters, informing the latest services, improvements & surveys.
Please email me a vulnerability test announcement whenever a new test is added.
   Privacy
Registered User Login
 
UserID:   
Passwd:  

 Forgot userid or passwd?
Email/Userid:




Home | About Us | Contact Us | Partner Programs | Developer APIs | Privacy | Mailing Lists | Abuse
Security Audits | Managed DNS | Network Monitoring | Site Analyzer | Internet Research Reports
Web Probe | Whois

© 1998-2016 E-Soft Inc. All rights reserved.