Jump to content

Advisories (MDKSA-2005:213 ): php


aru
 Share

Recommended Posts

Mandriva Advisories MDKSA-2005:213 : php

 

Updated php packages fix multiple vulnerabilities

November 16th, 2005

 

A number of vulnerabilities were discovered in PHP: An issue with fopen_wrappers.c would not properly restrict access to other directories when the open_basedir directive included a trailing slash (CVE-2005-3054); this issue does not affect Corporate Server 2.1. An issue with the apache2handler SAPI in mod_php could allow an attacker to cause a Denial of Service via the session.save_path option in an .htaccess file or VirtualHost stanza (CVE-2005-3319); this issue does not affect Corporate Server 2.1. A Denial of Service vulnerability was discovered in the way that PHP processes EXIF image data which could allow an attacker to cause PHP to crash by supplying carefully crafted EXIF image data (CVE-2005-3353). A cross-site scripting vulnerability was discovered in the phpinfo() function which could allow for the injection of javascript or HTML content onto a page displaying phpinfo() output, or to steal data such as cookies (CVE-2005-3388). A flaw in the parse_str() function could allow for the enabling of register_globals, even if it was disabled in the PHP configuration file (CVE-2005-3389). A vulnerability in the way that PHP registers global variables during a file upload request could allow a remote attacker to overwrite the $GLOBALS array which could potentially lead the execution of arbitrary PHP commands.This vulnerability only affects systems with register_globals enabled (CVE-2005-3390). The updated packages have been patched to address this issue.Once the new packages have been installed, you will need to restart your Apache server using "service httpd restart" in order for the new packages to take effect ("service httpd2-naat restart" for MNF2).

 

 

The released versions of Mandriva GNU/Linux affected are:

  • 10.1
  • CS2.1
  • CS3.0
  • MNF2.0
  • 10.2
  • 2006.0

Full information about this advisory, including the updated packages, is available at:

wwwnew.mandriva.com/security/advisories?name=MDKSA-2005:213

 

Other references:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3054

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3319

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3353

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3388

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3389

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3390

http://www.hardened-php.net/advisory_202005.79.html

http://www.hardened-php.net/advisory_192005.78.html

http://www.hardened-php.net/advisory_182005.77.html

 

Posted automatically by aru (mdksec2mub v: mdksec2mub,v 0.15 2005/11/24 16:53:12 aru Exp aru $)

Link to comment
Share on other sites

 Share

×
×
  • Create New...