Red Hat Security AdvisoryRHSA-2007:0349
php security update
Released 2007-05-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 php-4.3.9-3.22.5, php-4.3.9-3.22.5.i386, php-4.3.9-3.22.5.ia64 +47
- Red Hat Enterprise Linux Desktop version 4 php-4.3.9-3.22.5, php-4.3.9-3.22.5.i386, php-devel-4.3.9-3.22.5 +25
- Red Hat Enterprise Linux ES version 4 php-4.3.9-3.22.5, php-4.3.9-3.22.5.i386, php-4.3.9-3.22.5.ia64 +39
- Red Hat Enterprise Linux WS version 4 php-4.3.9-3.22.5, php-4.3.9-3.22.5.i386, php-4.3.9-3.22.5.ia64 +39
Fixes 2 records
Priority LOW 38
Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02922 · Published 2007-05-09 · Fixed CWE-119
Priority LOW 17
CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02066 · Published 2007-05-09 · Fixed CWE-20
