Red Hat Security AdvisoryRHSA-2006:0276
php security update
Released 2006-04-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 php-4.3.2-30.ent, php-4.3.2-30.ent.i386, php-devel-4.3.2-30.ent +11
- Red Hat Enterprise Linux AS version 3 php-4.3.2-30.ent, php-4.3.2-30.ent.i386, php-4.3.2-30.ent.ia64 +25
- Red Hat Enterprise Linux AS version 4 php-4.3.9-3.12, php-4.3.9-3.12.i386, php-4.3.9-3.12.ia64 +47
- Red Hat Enterprise Linux Desktop version 4 php-4.3.9-3.12, php-4.3.9-3.12.i386, php-devel-4.3.9-3.12 +25
- Red Hat Enterprise Linux ES version 3 php-4.3.2-30.ent, php-4.3.2-30.ent.i386, php-4.3.2-30.ent.ia64 +18
- Red Hat Enterprise Linux ES version 4 php-4.3.9-3.12, php-4.3.9-3.12.i386, php-4.3.9-3.12.ia64 +39
- Red Hat Enterprise Linux WS version 3 php-4.3.2-30.ent, php-4.3.2-30.ent.i386, php-4.3.2-30.ent.ia64 +18
- Red Hat Enterprise Linux WS version 4 php-4.3.9-3.12, php-4.3.9-3.12.i386, php-4.3.9-3.12.ia64 +39
Fixes 6 records
Priority MEDIUM 44
Buffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server (UW-IMAP) before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.08464 · Published 2005-10-13 · Fixed
Priority MEDIUM 42
PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user input in the html_entity_decode function and sends the encoded results back to t…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.20967 · Published 2006-03-29 · Fixed
Priority LOW 37
Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.12122 · Published 2006-06-14 · Fixed
Priority LOW 33
Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.11063 · Published 2006-04-10 · Fixed CWE-79
Priority LOW 28
CRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote attackers to inject arbitrary e-mail headers via line feeds (LF) in the "To" address argument.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03052 · Published 2005-11-29 · Fixed
Priority LOW 20
Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors and html_errors are on, allow remote attackers to inject arbitrary web script or HTML via inputs to PHP applications that ar…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.03774 · Published 2006-01-13 · Fixed CWE-79
THREATIST.IORead the docs