|
Family: Ubuntu Local Security Checks --> Category: infos
USN66-1 : php4 vulnerabilities Vulnerability Scan
Vulnerability Scan Summary php4 vulnerabilities
Detailed Explanation for this Vulnerability Test
Synopsis :
These remote packages are missing security patches :
- libapache2-mod-php4
- php4
- php4-cgi
- php4-curl
- php4-dev
- php4-domxml
- php4-gd
- php4-ldap
- php4-mcal
- php4-mhash
- php4-mysql
- php4-odbc
- php4-pear
- php4-recode
- php4-snmp
- php4-sybase
- php4-xslt
Description :
FraMe from kernelpanik.org reported that the cURL module does not
respect open_basedir restrictions. As a result, scripts which used
cURL to open files with an user-specified path could read arbitrary
local files outside of the open_basedir directory.
Stefano Di Paola discovered a vulnerability in PHP's shmop_write()
function. Its "offset" parameter was not checked for negative values,
which allowed a possible hacker to write arbitrary data to arbitrary memory
locations. A script which passed unchecked parameters to
shmop_write() could possibly be exploited to execute arbitrary code
with the rights of the web server and to bypass safe mode
restrictions.
Solution :
Upgrade to :
- libapache2-mod-php4-4.3.8-3ubuntu7.3 (Ubuntu 4.10)
- php4-4.3.8-3ubuntu7.3 (Ubuntu 4.10)
- php4-cgi-4.3.8-3ubuntu7.3 (Ubuntu 4.10)
- php4-curl-4.3.8-3ubuntu7.3 (Ubuntu 4.10)
- php4-dev-4.3.8-3ubuntu7.3 (Ubuntu 4.10)
- php4-domxml-4.3.8-3ubuntu7.3 (Ubuntu 4.10)
- php4-gd-4.3.8-3ubuntu7.3 (Ubuntu 4.10)
- php4-ldap-4.3.8-3ubuntu7.3 (Ubuntu 4.10)
- php4-mcal-4.3.8-3ubuntu7.3 (Ubuntu 4.10)
- php4-mhash-4.3.8-3ubuntu7.3 (Ubuntu 4.10)
- php4-mysql-4.3.8-3ubuntu7.3 (Ubuntu 4.10)
- php4-odbc-4.3.8-3
[...]
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|