Vulnerability Scanning Solutions, LLC.
Our Process
What We Scan For
Sample Report
Client List
Contact Us
What We Scan For
Family: Gentoo Local Security Checks --> Category: infos

[GLSA-200412-14] PHP: Multiple vulnerabilities Vulnerability Scan

Vulnerability Scan Summary
PHP: Multiple vulnerabilities

Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200412-14
(PHP: Multiple vulnerabilities)

Stefan Esser and Marcus Boerger reported several different issues
in the unserialize() function, including serious exploitable bugs in
the way it handles negative references (CVE-2004-1019).
Esser also discovered that the pack() and unpack() functions are
subject to integer overflows that can lead to a heap buffer overflow
and a heap information leak. Finally, he found that the way
multithreaded PHP handles safe_mode_exec_dir restrictions can be
bypassed, and that various path truncation issues also allow to bypass
path and safe_mode restrictions.
Ilia Alshanetsky found a
stack overflow issue in the exif_read_data() function (CVE-2004-1065).
Finally, Daniel Fabian found that addslashes and magic_quotes_gpc do
not properly escape null characters and that magic_quotes_gpc contains
a bug that could lead to one level directory traversal.


These issues could be exploited by a remote attacker to retrieve
web server heap information, bypass safe_mode or path restrictions and
potentially execute arbitrary code with the rights of the web server
running a PHP application.


There is no known workaround at this time.


All PHP users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-php/php-4.3.10"
All mod_php users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-php/mod_php-4.3.10"
All php-cgi users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-php/php-cgi-4.3.10"

Threat Level: High

Click HERE for more information and discussions on this network vulnerability scan.


P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.