Red Hat Security AdvisoryRHSA-2006:0568
php security update
Released 2006-07-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 php-4.3.2-33.ent, php-4.3.2-33.ent.i386, php-devel-4.3.2-33.ent +11
- Red Hat Enterprise Linux AS version 3 php-4.3.2-33.ent, php-4.3.2-33.ent.i386, php-4.3.2-33.ent.ia64 +25
- Red Hat Enterprise Linux AS version 4 php-4.3.9-3.15, php-4.3.9-3.15.i386, php-4.3.9-3.15.ia64 +47
- Red Hat Enterprise Linux Desktop version 4 php-4.3.9-3.15, php-4.3.9-3.15.i386, php-devel-4.3.9-3.15 +25
- Red Hat Enterprise Linux ES version 3 php-4.3.2-33.ent, php-4.3.2-33.ent.i386, php-4.3.2-33.ent.ia64 +18
- Red Hat Enterprise Linux ES version 4 php-4.3.9-3.15, php-4.3.9-3.15.i386, php-4.3.9-3.15.ia64 +39
- Red Hat Enterprise Linux WS version 3 php-4.3.2-33.ent, php-4.3.2-33.ent.i386, php-4.3.2-33.ent.ia64 +18
- Red Hat Enterprise Linux WS version 4 php-4.3.9-3.15, php-4.3.9-3.15.i386, php-4.3.9-3.15.ia64 +39
Fixes 3 records
Priority MEDIUM 47
zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is calle…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04136 · Published 2006-06-14 · Fixed
Priority LOW 36
Integer overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context-dependent attackers to execute arbitrary code via certain long arguments that cause a small buffer to be allocated, which t…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.1062 · Published 2006-04-24 · Fixed
Priority LOW 23
Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.06387 · Published 2006-04-10 · Fixed
THREATIST.IORead the docs