Red Hat Security AdvisoryRHSA-2012:0093
php security update
Released 2012-02-02 · Red Hat rating Critical · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) php-5.1.6-27.el5_7.5, php-5.1.6-27.el5_7.5.i386, php-bcmath-5.1.6-27.el5_7.5 +35
- Red Hat Enterprise Linux (v. 5 server) php-5.1.6-27.el5_7.5, php-5.1.6-27.el5_7.5.i386, php-5.1.6-27.el5_7.5.ia64 +47
- Red Hat Enterprise Linux AS version 4 php-4.3.9-3.36, php-4.3.9-3.36.i386, php-4.3.9-3.36.ia64 +47
- Red Hat Enterprise Linux Desktop Optional (v. 6) php-5.3.3-3.el6_2.6, php-bcmath-5.3.3-3.el6_2.6, php-cli-5.3.3-3.el6_2.6 +23
- Red Hat Enterprise Linux Desktop version 4 php-4.3.9-3.36, php-4.3.9-3.36.i386, php-devel-4.3.9-3.36 +25
- Red Hat Enterprise Linux ES version 4 php-4.3.9-3.36, php-4.3.9-3.36.i386, php-4.3.9-3.36.ia64 +39
- Red Hat Enterprise Linux HPC Node (v. 6) php-5.3.3-3.el6_2.6, php-cli-5.3.3-3.el6_2.6, php-common-5.3.3-3.el6_2.6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) php-5.3.3-3.el6_2.6, php-bcmath-5.3.3-3.el6_2.6, php-dba-5.3.3-3.el6_2.6 +21
- Red Hat Enterprise Linux Server (v. 6) php-5.3.3-3.el6_2.6, php-cli-5.3.3-3.el6_2.6, php-common-5.3.3-3.el6_2.6 +9
- Red Hat Enterprise Linux Server Optional (v. 6) php-5.3.3-3.el6_2.6, php-bcmath-5.3.3-3.el6_2.6, php-dba-5.3.3-3.el6_2.6 +12
- Red Hat Enterprise Linux WS version 4 php-4.3.9-3.36, php-4.3.9-3.36.i386, php-4.3.9-3.36.ia64 +39
- Red Hat Enterprise Linux Workstation (v. 6) php-5.3.3-3.el6_2.6, php-cli-5.3.3-3.el6_2.6, php-common-5.3.3-3.el6_2.6 +9
- Red Hat Enterprise Linux Workstation Optional (v. 6) php-5.3.3-3.el6_2.6, php-bcmath-5.3.3-3.el6_2.6, php-dba-5.3.3-3.el6_2.6 +12
Fixes 1 record
Priority MEDIUM 56
The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variable…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.29803 · Published 2012-02-06 · Fixed CWE-399
