Red Hat Security AdvisoryRHSA-2006:0669
php security update
Released 2006-09-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 php-4.3.2-36.ent, php-4.3.2-36.ent.i386, php-devel-4.3.2-36.ent +11
- Red Hat Enterprise Linux AS version 3 php-4.3.2-36.ent, php-4.3.2-36.ent.i386, php-4.3.2-36.ent.ia64 +25
- Red Hat Enterprise Linux AS version 4 php-4.3.9-3.18, php-4.3.9-3.18.i386, php-4.3.9-3.18.ia64 +47
- Red Hat Enterprise Linux Desktop version 4 php-4.3.9-3.18, php-4.3.9-3.18.i386, php-devel-4.3.9-3.18 +25
- Red Hat Enterprise Linux ES version 3 php-4.3.2-36.ent, php-4.3.2-36.ent.i386, php-4.3.2-36.ent.ia64 +18
- Red Hat Enterprise Linux ES version 4 php-4.3.9-3.18, php-4.3.9-3.18.i386, php-4.3.9-3.18.ia64 +39
- Red Hat Enterprise Linux WS version 3 php-4.3.2-36.ent, php-4.3.2-36.ent.i386, php-4.3.2-36.ent.ia64 +18
- Red Hat Enterprise Linux WS version 4 php-4.3.9-3.18, php-4.3.9-3.18.i386, php-4.3.9-3.18.ia64 +39
Fixes 5 records
Priority MEDIUM 49
Multiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext/standard/string.c in PHP before 5.1.5, when used on a 64-bit system, have unspecified impact and attack vectors, a different vu…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06147 · Published 2006-08-31 · Fixed CWE-787
Priority MEDIUM 45
Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "certain characters in session names," including special characters that are frequently associated with CRLF in…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.02545 · Published 2006-06-14 · Fixed
Priority LOW 25
Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.08676 · Published 2006-08-31 · Fixed
Priority LOW 25
scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.02011 · Published 2006-08-08 · Fixed
Priority LOW 18
Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.0236 · Published 2006-08-31 · Fixed CWE-189
THREATIST.IORead the docs