Red Hat Security AdvisoryRHSA-2006:0567
php security update
Released 2006-07-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1
- Red Hat Enterprise Linux ES version 2.1
- Red Hat Enterprise Linux WS version 2.1
- Red Hat Linux Advanced Workstation 2.1
Fixes 3 records
Priority MEDIUM 47
zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is calle…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04136 · Published 2006-06-14 · Fixed
Priority LOW 26
The php_if_imap_mime_header_decode function in the IMAP functionality in PHP before 4.2.2 allows remote attackers to cause a denial of service (crash) via an e-mail header with a long "To" header.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01716 · Published 2006-06-14 · Fixed
Priority LOW 23
Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.06387 · Published 2006-04-10 · Fixed
