Vulnerabilities > CVE-2007-4670 - Unspecified vulnerability in PHP

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

network

low complexity

php

nessus

NVD

Published: 2007-09-05

Updated: 2018-10-03

Summary

Unspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to an "Improved fix for MOPB-03-2007," probably a variant of CVE-2007-1285.

Vulnerable Configurations

Part	Description	Count
Application	Php PHP PHP - PHP PHP 0.1 PHP PHP 0.1.1 PHP PHP 0.2 PHP PHP 0.2.0 PHP PHP 0.2.1 PHP PHP 0.2.2 PHP PHP 0.2.3 PHP PHP 0.2.4 PHP PHP 0.3 PHP PHP 0.4 PHP PHP 0.5 PHP PHP 0.5.2 PHP PHP 0.5.3 PHP PHP 0.6 PHP PHP 0.7 PHP PHP 0.9 PHP PHP 0.9.0 PHP PHP 0.9.1 PHP PHP 0.9.2 PHP PHP 0.9.3 PHP PHP 0.9.4 PHP PHP 0.10 PHP PHP 0.11 PHP PHP 0.90 PHP PHP 0.91 PHP PHP 1.0 PHP PHP 1.0.0 PHP PHP 1.0.1 PHP PHP 1.0.2 PHP PHP 1.0.3 PHP PHP 1.0.4 PHP PHP 1.1 PHP PHP 1.1.0 PHP PHP 1.1.1 PHP PHP 1.2 PHP PHP 1.2.0 PHP PHP 1.2.1 PHP PHP 1.2.2 PHP PHP 1.2.3 PHP PHP 1.2.4 PHP PHP 1.2.5 PHP PHP 1.3 PHP PHP 1.3.1 PHP PHP 1.3.5 PHP PHP 1.4 PHP PHP 1.5 PHP PHP 2.0 PHP PHP 2.0.0 PHP PHP 2.0.1 PHP PHP 2.0.2 PHP PHP 2.0B10 PHP PHP 3.0 PHP PHP 3.0.1 PHP PHP 3.0.2 PHP PHP 3.0.3 PHP PHP 3.0.4 PHP PHP 3.0.5 PHP PHP 3.0.6 PHP PHP 3.0.7 PHP PHP 3.0.8 PHP PHP 3.0.9 PHP PHP 3.0.10 PHP PHP 3.0.11 PHP PHP 3.0.12 PHP PHP 3.0.13 PHP PHP 3.0.14 PHP PHP 3.0.15 PHP PHP 3.0.16 PHP PHP 3.0.17 PHP PHP 3.0.18 PHP PHP 4.0 PHP PHP 4.0.0 PHP PHP 4.0.1 PHP PHP 4.0.2 PHP PHP 4.0.3 PHP PHP 4.0.4 PHP PHP 4.0.5 PHP PHP 4.0.6 PHP PHP 4.0.7 PHP PHP 4.1.0 PHP PHP 4.1.1 PHP PHP 4.1.2 PHP PHP 4.1.3 PHP PHP 4.2 PHP PHP 4.2.0 PHP PHP 4.2.1 PHP PHP 4.2.2 PHP PHP 4.2.3 PHP PHP 4.2.4 PHP PHP 4.3 PHP PHP 4.3.0 PHP PHP 4.3.1 PHP PHP 4.3.2 PHP PHP 4.3.3 PHP PHP 4.3.4 PHP PHP 4.3.5 PHP PHP 4.3.6 PHP PHP 4.3.7 PHP PHP 4.3.8 PHP PHP 4.3.9 PHP PHP 4.3.10 PHP PHP 4.3.11 PHP PHP 4.4.0 PHP PHP 4.4.1 PHP PHP 4.4.2 PHP PHP 4.4.3 PHP PHP 4.4.4 PHP PHP 4.4.5 PHP PHP 4.4.6 PHP PHP 4.4.7 PHP PHP 4.4.8 PHP PHP 4.4.9 PHP PHP 5.0.0 PHP PHP 5.0.1 PHP PHP 5.0.2 PHP PHP 5.0.3 PHP PHP 5.0.4 PHP PHP 5.0.5 PHP PHP 5.1 PHP PHP 5.1.0 PHP PHP 5.1.1 PHP PHP 5.1.2 PHP PHP 5.1.3 PHP PHP 5.1.4 PHP PHP 5.1.5 PHP PHP 5.1.6 PHP PHP 5.2.0 PHP PHP 5.2.1 PHP PHP 5.2.2 PHP PHP 5.2.3	328

Nessus

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2007-0889.NASL
description	Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. These updated packages address the following vulnerabilities : Various integer overflow flaws were found in the PHP gd extension script that could be forced to resize images from an untrusted source, possibly allowing a remote attacker to execute arbitrary code as the apache user. (CVE-2007-3996) An integer overflow flaw was found in the PHP chunk_split function. If a remote attacker was able to pass arbitrary data to the third argument of chunk_split they could possibly execute arbitrary code as the apache user. Note that it is unusual for a PHP script to use the chunk_split function with a user-supplied third argument. (CVE-2007-2872) A previous security update introduced a bug into PHP session cookie handling. This could allow an attacker to stop a victim from viewing a vulnerable website if the victim has first visited a malicious web page under the control of the attacker, and that page can set a cookie for the vulnerable website. (CVE-2007-4670) A flaw was found in the PHP money_format function. If a remote attacker was able to pass arbitrary data to the money_format function this could possibly result in an information leak or denial of service. Note that it is unusual for a PHP script to pass user-supplied data to the money_format function. (CVE-2007-4658) A flaw was found in the PHP wordwrap function. If a remote attacker was able to pass arbitrary data to the wordwrap function this could possibly result in a denial of service. (CVE-2007-3998) A bug was found in PHP session cookie handling. This could allow an attacker to create a cross-site cookie insertion attack if a victim follows an untrusted carefully-crafted URL. (CVE-2007-3799) An infinite-loop flaw was discovered in the PHP gd extension. A script that could be forced to process PNG images from an untrusted source could allow a remote attacker to cause a denial of service. (CVE-2007-2756) A flaw was found in the PHP
last seen	2020-06-01
modified	2020-06-02
plugin id	26191
published	2007-09-26
reporter	This script is Copyright (C) 2007-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/26191
title	RHEL 3 : php (RHSA-2007:0889)

NASL family	Fedora Local Security Checks
NASL id	FEDORA_2007-709.NASL
description	This update fixes a number of security issues in PHP : - various integer overflow flaws were found in the PHP gd extension. A script that could be forced to resize images from an untrusted source could possibly allow a remote attacker to execute arbitrary code as the apache user. (CVE-2007-3996) - an integer overflow flaw was found in the PHP chunk_split function. If a remote attacker was able to pass arbitrary data to the third argument of chunk_split they could possibly execute arbitrary code as the apache user. Note that it is unusual for a PHP script to use the chunk_script function with a user-supplied third argument. (CVE-2007-2872) - a previous security update introduced a bug into PHP session cookie handling. This could allow an attacker to stop a victim from viewing a vulnerable website if the victim has first visited a malicious web page under the control of the attacker, and that page can set a cookie for the vulnerable website. (CVE-2007-4670) - a flaw was found in the PHP money_format function. If a remote attacker was able to pass arbitrary data to the money_format function this could possibly result in an information leak or denial of service. Note that is is unusual for a PHP script to pass user-supplied data to the money_format function. (CVE-2007-4658) - a flaw was found in the PHP wordwrap function. If a remote attacker was able to pass arbitrary data to the wordwrap function this could possibly result in a denial of service. (CVE-2007-3998) - a bug was found in PHP session cookie handling. This could allow an attacker to create a cross-site cookie insertion attack if a victim follows an untrusted carefully-crafted URL. (CVE-2007-3799) - an infinite-loop flaw was discovered in the PHP gd extension. A script that could be forced to process PNG images from an untrusted source could allow a remote attacker to cause a denial of service. (CVE-2007-2756) Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	26115
published	2007-09-25
reporter	This script is Copyright (C) 2007-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/26115
title	Fedora Core 6 : php-5.1.6-3.7.fc6 (2007-709)

NASL family	Gentoo Local Security Checks
NASL id	GENTOO_GLSA-200710-02.NASL
description	The remote host is affected by the vulnerability described in GLSA-200710-02 (PHP: Multiple vulnerabilities) Several vulnerabilities were found in PHP. Mattias Bengtsson and Philip Olausson reported integer overflows in the gdImageCreate() and gdImageCreateTrueColor() functions of the GD library which can cause heap-based buffer overflows (CVE-2007-3996). Gerhard Wagner discovered an integer overflow in the chunk_split() function that can lead to a heap-based buffer overflow (CVE-2007-2872). Its incomplete fix caused incorrect buffer size calculation due to precision loss, also resulting in a possible heap-based buffer overflow (CVE-2007-4661 and CVE-2007-4660). A buffer overflow in the sqlite_decode_binary() of the SQLite extension found by Stefan Esser that was addressed in PHP 5.2.1 was not fixed correctly (CVE-2007-1887). Stefan Esser discovered an error in the zend_alter_ini_entry() function handling a memory_limit violation (CVE-2007-4659). Stefan Esser also discovered a flaw when handling interruptions with userspace error handlers that can be exploited to read arbitrary heap memory (CVE-2007-1883). Disclosure of sensitive memory can also be triggered due to insufficient boundary checks in the strspn() and strcspn() functions, an issue discovered by Mattias Bengtsson and Philip Olausson (CVE-2007-4657) Stefan Esser reported incorrect validation in the FILTER_VALIDATE_EMAIL filter of the Filter extension allowing arbitrary email header injection (CVE-2007-1900). NOTE: This CVE was referenced, but not fixed in GLSA 200705-19. Stanislav Malyshev found an error with unknown impact in the money_format() function when processing
last seen	2020-06-01
modified	2020-06-02
plugin id	26942
published	2007-10-09
reporter	This script is Copyright (C) 2007-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/26942
title	GLSA-200710-02 : PHP: Multiple vulnerabilities

NASL family	Scientific Linux Local Security Checks
NASL id	SL_20070920_PHP_ON_SL5_X.NASL
description	Various integer overflow flaws were found in the PHP gd extension. A script that could be forced to resize images from an untrusted source could possibly allow a remote attacker to execute arbitrary code as the apache user. (CVE-2007-3996) An integer overflow flaw was found in the PHP chunk_split function. If a remote attacker was able to pass arbitrary data to the third argument of chunk_split they could possibly execute arbitrary code as the apache user. Note that it is unusual for a PHP script to use the chunk_script function with a user-supplied third argument. (CVE-2007-2872) A previous security update introduced a bug into PHP session cookie handling. This could allow an attacker to stop a victim from viewing a vulnerable website if the victim has first visited a malicious web page under the control of the attacker, and that page can set a cookie for the vulnerable website. (CVE-2007-4670) A flaw was found in the PHP money_format function. If a remote attacker was able to pass arbitrary data to the money_format function this could possibly result in an information leak or denial of service. Note that is is unusual for a PHP script to pass user-supplied data to the money_format function. (CVE-2007-4658) A flaw was found in the PHP wordwrap function. If a remote attacker was able to pass arbitrary data to the wordwrap function this could possibly result in a denial of service. (CVE-2007-3998) A bug was found in PHP session cookie handling. This could allow an attacker to create a cross-site cookie insertion attack if a victim follows an untrusted carefully-crafted URL. (CVE-2007-3799) An infinite-loop flaw was discovered in the PHP gd extension. A script that could be forced to process PNG images from an untrusted source could allow a remote attacker to cause a denial of service. (CVE-2007-2756)
last seen	2020-06-01
modified	2020-06-02
plugin id	60255
published	2012-08-01
reporter	This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/60255
title	Scientific Linux Security Update : php on SL5.x, SL4.x i386/x86_64

NASL family	FreeBSD Local Security Checks
NASL id	FREEBSD_PKG_71D903FC602D11DC898C001921AB2FA4.NASL
description	The PHP development team reports : Security Enhancements and Fixes in PHP 5.2.4 : - Fixed a floating point exception inside wordwrap() (Reported by Mattias Bengtsson) - Fixed several integer overflows inside the GD extension (Reported by Mattias Bengtsson) - Fixed size calculation in chunk_split() (Reported by Gerhard Wagner) - Fixed integer overflow in str[c]spn(). (Reported by Mattias Bengtsson) - Fixed money_format() not to accept multiple %i or %n tokens. (Reported by Stanislav Malyshev) - Fixed zend_alter_ini_entry() memory_limit interruption vulnerability. (Reported by Stefan Esser) - Fixed INFILE LOCAL option handling with MySQL extensions not to be allowed when open_basedir or safe_mode is active. (Reported by Mattias Bengtsson) - Fixed session.save_path and error_log values to be checked against open_basedir and safe_mode (CVE-2007-3378) (Reported by Maksymilian Arciemowicz) - Fixed a possible invalid read in glob() win32 implementation (CVE-2007-3806) (Reported by shinnai) - Fixed a possible buffer overflow in php_openssl_make_REQ (Reported by zatanzlatan at hotbrev dot com) - Fixed an open_basedir bypass inside glob() function (Reported by dr at peytz dot dk) - Fixed a possible open_basedir bypass inside session extension when the session file is a symlink (Reported by c dot i dot morris at durham dot ac dot uk) - Improved fix for MOPB-03-2007. - Corrected fix for CVE-2007-2872.
last seen	2020-06-01
modified	2020-06-02
plugin id	26038
published	2007-09-14
reporter	This script is Copyright (C) 2007-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/26038
title	FreeBSD : php -- multiple vulnerabilities (71d903fc-602d-11dc-898c-001921ab2fa4)

NASL family	CentOS Local Security Checks
NASL id	CENTOS_RHSA-2007-0890.NASL
description	Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. Various integer overflow flaws were found in the PHP gd extension. A script that could be forced to resize images from an untrusted source could possibly allow a remote attacker to execute arbitrary code as the apache user. (CVE-2007-3996) An integer overflow flaw was found in the PHP chunk_split function. If a remote attacker was able to pass arbitrary data to the third argument of chunk_split they could possibly execute arbitrary code as the apache user. Note that it is unusual for a PHP script to use the chunk_script function with a user-supplied third argument. (CVE-2007-2872) A previous security update introduced a bug into PHP session cookie handling. This could allow an attacker to stop a victim from viewing a vulnerable website if the victim has first visited a malicious web page under the control of the attacker, and that page can set a cookie for the vulnerable website. (CVE-2007-4670) A flaw was found in the PHP money_format function. If a remote attacker was able to pass arbitrary data to the money_format function this could possibly result in an information leak or denial of service. Note that is is unusual for a PHP script to pass user-supplied data to the money_format function. (CVE-2007-4658) A flaw was found in the PHP wordwrap function. If a remote attacker was able to pass arbitrary data to the wordwrap function this could possibly result in a denial of service. (CVE-2007-3998) A bug was found in PHP session cookie handling. This could allow an attacker to create a cross-site cookie insertion attack if a victim follows an untrusted carefully-crafted URL. (CVE-2007-3799) An infinite-loop flaw was discovered in the PHP gd extension. A script that could be forced to process PNG images from an untrusted source could allow a remote attacker to cause a denial of service. (CVE-2007-2756) Users of PHP should upgrade to these updated packages, which contain backported patches to correct these issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	26075
published	2007-09-24
reporter	This script is Copyright (C) 2007-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/26075
title	CentOS 4 / 5 : php (CESA-2007:0890)

NASL family	CentOS Local Security Checks
NASL id	CENTOS_RHSA-2007-0889.NASL
description	Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. These updated packages address the following vulnerabilities : Various integer overflow flaws were found in the PHP gd extension script that could be forced to resize images from an untrusted source, possibly allowing a remote attacker to execute arbitrary code as the apache user. (CVE-2007-3996) An integer overflow flaw was found in the PHP chunk_split function. If a remote attacker was able to pass arbitrary data to the third argument of chunk_split they could possibly execute arbitrary code as the apache user. Note that it is unusual for a PHP script to use the chunk_split function with a user-supplied third argument. (CVE-2007-2872) A previous security update introduced a bug into PHP session cookie handling. This could allow an attacker to stop a victim from viewing a vulnerable website if the victim has first visited a malicious web page under the control of the attacker, and that page can set a cookie for the vulnerable website. (CVE-2007-4670) A flaw was found in the PHP money_format function. If a remote attacker was able to pass arbitrary data to the money_format function this could possibly result in an information leak or denial of service. Note that it is unusual for a PHP script to pass user-supplied data to the money_format function. (CVE-2007-4658) A flaw was found in the PHP wordwrap function. If a remote attacker was able to pass arbitrary data to the wordwrap function this could possibly result in a denial of service. (CVE-2007-3998) A bug was found in PHP session cookie handling. This could allow an attacker to create a cross-site cookie insertion attack if a victim follows an untrusted carefully-crafted URL. (CVE-2007-3799) An infinite-loop flaw was discovered in the PHP gd extension. A script that could be forced to process PNG images from an untrusted source could allow a remote attacker to cause a denial of service. (CVE-2007-2756) A flaw was found in the PHP
last seen	2020-06-01
modified	2020-06-02
plugin id	26204
published	2007-10-03
reporter	This script is Copyright (C) 2007-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/26204
title	CentOS 3 : php (CESA-2007:0889)

NASL family	Scientific Linux Local Security Checks
NASL id	SL_20070926_PHP_ON_SL3.NASL
description	Various integer overflow flaws were found in the PHP gd extension script that could be forced to resize images from an untrusted source, possibly allowing a remote attacker to execute arbitrary code as the apache user. (CVE-2007-3996) An integer overflow flaw was found in the PHP chunk_split function. If a remote attacker was able to pass arbitrary data to the third argument of chunk_split they could possibly execute arbitrary code as the apache user. Note that it is unusual for a PHP script to use the chunk_split function with a user-supplied third argument. (CVE-2007-2872) A previous security update introduced a bug into PHP session cookie handling. This could allow an attacker to stop a victim from viewing a vulnerable website if the victim has first visited a malicious web page under the control of the attacker, and that page can set a cookie for the vulnerable website. (CVE-2007-4670) A flaw was found in the PHP money_format function. If a remote attacker was able to pass arbitrary data to the money_format function this could possibly result in an information leak or denial of service. Note that it is unusual for a PHP script to pass user-supplied data to the money_format function. (CVE-2007-4658) A flaw was found in the PHP wordwrap function. If a remote attacker was able to pass arbitrary data to the wordwrap function this could possibly result in a denial of service. (CVE-2007-3998) A bug was found in PHP session cookie handling. This could allow an attacker to create a cross-site cookie insertion attack if a victim follows an untrusted carefully-crafted URL. (CVE-2007-3799) An infinite-loop flaw was discovered in the PHP gd extension. A script that could be forced to process PNG images from an untrusted source could allow a remote attacker to cause a denial of service. (CVE-2007-2756) A flaw was found in the PHP
last seen	2020-06-01
modified	2020-06-02
plugin id	60257
published	2012-08-01
reporter	This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/60257
title	Scientific Linux Security Update : php on SL3.x i386/x86_64

NASL family	CGI abuses
NASL id	PHP_4_4_7_OR_5_2_2.NASL
description	According to its banner, the version of PHP installed on the remote host is older than 4.4.7 / 5.2.2. Such versions may be affected by several issues, including buffer overflows in the GD library.
last seen	2020-06-01
modified	2020-06-02
plugin id	25159
published	2007-05-04
reporter	This script is Copyright (C) 2007-2018 Westpoint Limited.
source	https://www.tenable.com/plugins/nessus/25159
title	PHP < 4.4.7 / 5.2.2 Multiple Vulnerabilities

NASL family	Oracle Linux Local Security Checks
NASL id	ORACLELINUX_ELSA-2007-0889.NASL
description	From Red Hat Security Advisory 2007:0889 : Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. These updated packages address the following vulnerabilities : Various integer overflow flaws were found in the PHP gd extension script that could be forced to resize images from an untrusted source, possibly allowing a remote attacker to execute arbitrary code as the apache user. (CVE-2007-3996) An integer overflow flaw was found in the PHP chunk_split function. If a remote attacker was able to pass arbitrary data to the third argument of chunk_split they could possibly execute arbitrary code as the apache user. Note that it is unusual for a PHP script to use the chunk_split function with a user-supplied third argument. (CVE-2007-2872) A previous security update introduced a bug into PHP session cookie handling. This could allow an attacker to stop a victim from viewing a vulnerable website if the victim has first visited a malicious web page under the control of the attacker, and that page can set a cookie for the vulnerable website. (CVE-2007-4670) A flaw was found in the PHP money_format function. If a remote attacker was able to pass arbitrary data to the money_format function this could possibly result in an information leak or denial of service. Note that it is unusual for a PHP script to pass user-supplied data to the money_format function. (CVE-2007-4658) A flaw was found in the PHP wordwrap function. If a remote attacker was able to pass arbitrary data to the wordwrap function this could possibly result in a denial of service. (CVE-2007-3998) A bug was found in PHP session cookie handling. This could allow an attacker to create a cross-site cookie insertion attack if a victim follows an untrusted carefully-crafted URL. (CVE-2007-3799) An infinite-loop flaw was discovered in the PHP gd extension. A script that could be forced to process PNG images from an untrusted source could allow a remote attacker to cause a denial of service. (CVE-2007-2756) A flaw was found in the PHP
last seen	2020-06-01
modified	2020-06-02
plugin id	67569
published	2013-07-12
reporter	This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/67569
title	Oracle Linux 3 : php (ELSA-2007-0889)

NASL family	Ubuntu Local Security Checks
NASL id	UBUNTU_USN-549-2.NASL
description	USN-549-1 fixed vulnerabilities in PHP. However, some upstream changes were incomplete, which caused crashes in certain situations with Ubuntu 7.10. This update fixes the problem. We apologize for the inconvenience. It was discovered that the wordwrap function did not correctly check lengths. Remote attackers could exploit this to cause a crash or monopolize CPU resources, resulting in a denial of service. (CVE-2007-3998) Integer overflows were discovered in the strspn and strcspn functions. Attackers could exploit this to read arbitrary areas of memory, possibly gaining access to sensitive information. (CVE-2007-4657) Stanislav Malyshev discovered that money_format function did not correctly handle certain tokens. If a PHP application were tricked into processing a bad format string, a remote attacker could execute arbitrary code with application privileges. (CVE-2007-4658) It was discovered that the php_openssl_make_REQ function did not correctly check buffer lengths. A remote attacker could send a specially crafted message and execute arbitrary code with application privileges. (CVE-2007-4662) It was discovered that certain characters in session cookies were not handled correctly. A remote attacker could injection values which could lead to altered application behavior, potentially gaining additional privileges. (CVE-2007-3799) Gerhard Wagner discovered that the chunk_split function did not correctly handle long strings. A remote attacker could exploit this to execute arbitrary code with application privileges. (CVE-2007-2872, CVE-2007-4660, CVE-2007-4661) Stefan Esser discovered that deeply nested arrays could be made to fill stack space. A remote attacker could exploit this to cause a crash or monopolize CPU resources, resulting in a denial of service. (CVE-2007-1285, CVE-2007-4670) Rasmus Lerdorf discovered that the htmlentities and htmlspecialchars functions did not correctly stop when handling partial multibyte sequences. A remote attacker could exploit this to read certain areas of memory, possibly gaining access to sensitive information. (CVE-2007-5898) It was discovered that the output_add_rewrite_var fucntion would sometimes leak session id information to forms targeting remote URLs. Malicious remote sites could use this information to gain access to a PHP application user
last seen	2020-06-01
modified	2020-06-02
plugin id	29213
published	2007-12-04
reporter	Ubuntu Security Notice (C) 2007-2019 Canonical, Inc. / NASL script (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/29213
title	Ubuntu 7.10 : php5 regression (USN-549-2)

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2007-0890.NASL
description	Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. Various integer overflow flaws were found in the PHP gd extension. A script that could be forced to resize images from an untrusted source could possibly allow a remote attacker to execute arbitrary code as the apache user. (CVE-2007-3996) An integer overflow flaw was found in the PHP chunk_split function. If a remote attacker was able to pass arbitrary data to the third argument of chunk_split they could possibly execute arbitrary code as the apache user. Note that it is unusual for a PHP script to use the chunk_script function with a user-supplied third argument. (CVE-2007-2872) A previous security update introduced a bug into PHP session cookie handling. This could allow an attacker to stop a victim from viewing a vulnerable website if the victim has first visited a malicious web page under the control of the attacker, and that page can set a cookie for the vulnerable website. (CVE-2007-4670) A flaw was found in the PHP money_format function. If a remote attacker was able to pass arbitrary data to the money_format function this could possibly result in an information leak or denial of service. Note that is is unusual for a PHP script to pass user-supplied data to the money_format function. (CVE-2007-4658) A flaw was found in the PHP wordwrap function. If a remote attacker was able to pass arbitrary data to the wordwrap function this could possibly result in a denial of service. (CVE-2007-3998) A bug was found in PHP session cookie handling. This could allow an attacker to create a cross-site cookie insertion attack if a victim follows an untrusted carefully-crafted URL. (CVE-2007-3799) An infinite-loop flaw was discovered in the PHP gd extension. A script that could be forced to process PNG images from an untrusted source could allow a remote attacker to cause a denial of service. (CVE-2007-2756) Users of PHP should upgrade to these updated packages, which contain backported patches to correct these issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	26110
published	2007-09-24
reporter	This script is Copyright (C) 2007-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/26110
title	RHEL 4 / 5 : php (RHSA-2007:0890)

NASL family	Oracle Linux Local Security Checks
NASL id	ORACLELINUX_ELSA-2007-0890.NASL
description	From Red Hat Security Advisory 2007:0890 : Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. Various integer overflow flaws were found in the PHP gd extension. A script that could be forced to resize images from an untrusted source could possibly allow a remote attacker to execute arbitrary code as the apache user. (CVE-2007-3996) An integer overflow flaw was found in the PHP chunk_split function. If a remote attacker was able to pass arbitrary data to the third argument of chunk_split they could possibly execute arbitrary code as the apache user. Note that it is unusual for a PHP script to use the chunk_script function with a user-supplied third argument. (CVE-2007-2872) A previous security update introduced a bug into PHP session cookie handling. This could allow an attacker to stop a victim from viewing a vulnerable website if the victim has first visited a malicious web page under the control of the attacker, and that page can set a cookie for the vulnerable website. (CVE-2007-4670) A flaw was found in the PHP money_format function. If a remote attacker was able to pass arbitrary data to the money_format function this could possibly result in an information leak or denial of service. Note that is is unusual for a PHP script to pass user-supplied data to the money_format function. (CVE-2007-4658) A flaw was found in the PHP wordwrap function. If a remote attacker was able to pass arbitrary data to the wordwrap function this could possibly result in a denial of service. (CVE-2007-3998) A bug was found in PHP session cookie handling. This could allow an attacker to create a cross-site cookie insertion attack if a victim follows an untrusted carefully-crafted URL. (CVE-2007-3799) An infinite-loop flaw was discovered in the PHP gd extension. A script that could be forced to process PNG images from an untrusted source could allow a remote attacker to cause a denial of service. (CVE-2007-2756) Users of PHP should upgrade to these updated packages, which contain backported patches to correct these issues.
last seen	2020-06-01
modified	2020-06-02
plugin id	67570
published	2013-07-12
reporter	This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/67570
title	Oracle Linux 4 / 5 : php (ELSA-2007-0890)

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2007-0888.NASL
description	Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. Various integer overflow flaws were found in the PHP gd extension. A script that could be forced to resize images from an untrusted source could possibly allow a remote attacker to execute arbitrary code as the apache user. (CVE-2007-3996) An integer overflow flaw was found in the PHP chunk_split function. If a remote attacker was able to pass arbitrary data to the third argument of chunk_split they could possibly execute arbitrary code as the apache user. Note that it is unusual for a PHP script to use the chunk_script function with a user-supplied third argument. (CVE-2007-2872) A previous security update introduced a bug into PHP session cookie handling. This could allow an attacker to stop a victim from viewing a vulnerable website if the victim has first visited a malicious web page under the control of the attacker, and that page can set a cookie for the vulnerable website. (CVE-2007-4670) A bug was found in PHP session cookie handling. This could allow an attacker to create a cross-site cookie insertion attack if a victim follows an untrusted carefully-crafted URL. (CVE-2007-3799) A flaw was found in the PHP
last seen	2020-06-01
modified	2020-06-02
plugin id	27564
published	2007-10-25
reporter	This script is Copyright (C) 2007-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/27564
title	RHEL 2.1 : php (RHSA-2007:0888)

NASL family	Mandriva Local Security Checks
NASL id	MANDRAKE_MDKSA-2007-187.NASL
description	Numerous vulnerabilities were discovered in the PHP scripting language that are corrected with this update. An integer overflow in the substr_compare() function allows context-dependent attackers to read sensitive memory via a large value in the length argument. This only affects PHP5 (CVE-2007-1375). A stack-based buffer overflow in the zip:// URI wrapper in PECL ZIP 1.8.3 and earlier allowes remote attackers to execute arbitrary code via a long zip:// URL. This only affects Corporate Server 4.0 (CVE-2007-1399). A CRLF injection vulnerability in the FILTER_VALIDATE_EMAIL filter could allow an attacker to inject arbitrary email headers via a special email address. This only affects Mandriva Linux 2007.1 (CVE-2007-1900). The mcrypt_create_iv() function calls php_rand_r() with an uninitialized seed variable, thus always generating the same initialization vector, which may allow an attacker to decrypt certain data more easily because of the guessable encryption keys (CVE-2007-2727). The soap extension calls php_rand_r() with an uninitialized seec variable, which has unknown impact and attack vectors; an issue similar to that affecting mcrypt_create_iv(). This only affects PHP5 (CVE-2007-2728). The substr_count() function allows attackers to obtain sensitive information via unspecified vectors. This only affects PHP5 (CVE-2007-2748). An infinite loop was found in the gd extension that could be used to cause a denial of service if a script were forced to process certain PNG images from untrusted sources (CVE-2007-2756). An integer overflow flaw was found in the chunk_split() function that ould possibly execute arbitrary code as the apache user if a remote attacker was able to pass arbitrary data to the third argument of chunk_split() (CVE-2007-2872). A flaw in the PHP session cookie handling could allow an attacker to create a cross-site cookie insertion attack if a victim followed an untrusted carefully-crafted URL (CVE-2007-3799). Various integer overflow flaws were discovered in the PHP gd extension that could allow a remote attacker to execute arbitrary code as the apache user (CVE-2007-3996). A flaw in the wordwrap() frunction could result in a denial of ervice if a remote attacker was able to pass arbitrary data to the function (CVE-2007-3998). A flaw in the money_format() function could result in an information leak or denial of service if a remote attacker was able to pass arbitrary data to this function; this situation would be unlikely however (CVE-2007-4658). A bug in the PHP session cookie handling could allow an attacker to stop a victim from viewing a vulnerable website if the victim first visited a malicious website under the control of the attacker who was able to use that page to set a cookie for the vulnerable website (CVE-2007-4670). Updated packages have been patched to prevent these issues. In addition, PECL ZIP version 1.8.10 is being provided for Corporate Server 4.0.
last seen	2020-06-01
modified	2020-06-02
plugin id	26107
published	2007-09-24
reporter	This script is Copyright (C) 2007-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/26107
title	Mandrake Linux Security Advisory : php (MDKSA-2007:187)

NASL family	Ubuntu Local Security Checks
NASL id	UBUNTU_USN-549-1.NASL
description	It was discovered that the wordwrap function did not correctly check lengths. Remote attackers could exploit this to cause a crash or monopolize CPU resources, resulting in a denial of service. (CVE-2007-3998) Integer overflows were discovered in the strspn and strcspn functions. Attackers could exploit this to read arbitrary areas of memory, possibly gaining access to sensitive information. (CVE-2007-4657) Stanislav Malyshev discovered that money_format function did not correctly handle certain tokens. If a PHP application were tricked into processing a bad format string, a remote attacker could execute arbitrary code with application privileges. (CVE-2007-4658) It was discovered that the php_openssl_make_REQ function did not correctly check buffer lengths. A remote attacker could send a specially crafted message and execute arbitrary code with application privileges. (CVE-2007-4662) It was discovered that certain characters in session cookies were not handled correctly. A remote attacker could injection values which could lead to altered application behavior, potentially gaining additional privileges. (CVE-2007-3799) Gerhard Wagner discovered that the chunk_split function did not correctly handle long strings. A remote attacker could exploit this to execute arbitrary code with application privileges. (CVE-2007-2872, CVE-2007-4660, CVE-2007-4661) Stefan Esser discovered that deeply nested arrays could be made to fill stack space. A remote attacker could exploit this to cause a crash or monopolize CPU resources, resulting in a denial of service. (CVE-2007-1285, CVE-2007-4670) Rasmus Lerdorf discovered that the htmlentities and htmlspecialchars functions did not correctly stop when handling partial multibyte sequences. A remote attacker could exploit this to read certain areas of memory, possibly gaining access to sensitive information. (CVE-2007-5898) It was discovered that the output_add_rewrite_var fucntion would sometimes leak session id information to forms targeting remote URLs. Malicious remote sites could use this information to gain access to a PHP application user
last seen	2020-06-01
modified	2020-06-02
plugin id	28372
published	2007-11-30
reporter	Ubuntu Security Notice (C) 2007-2019 Canonical, Inc. / NASL script (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/28372
title	Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : php5 vulnerabilities (USN-549-1)

Oval

accepted

2013-04-29T04:10:52.362-04:00

class

vulnerability

contributors

name Aharon Chernin
organization SCAP.com, LLC
name Dragos Prisaca
organization G2, Inc.

definition_extensions

comment The operating system installed on the system is Red Hat Enterprise Linux 3
oval oval:org.mitre.oval:def:11782
comment CentOS Linux 3.x
oval oval:org.mitre.oval:def:16651
comment The operating system installed on the system is Red Hat Enterprise Linux 4
oval oval:org.mitre.oval:def:11831
comment CentOS Linux 4.x
oval oval:org.mitre.oval:def:16636
comment Oracle Linux 4.x
oval oval:org.mitre.oval:def:15990
comment The operating system installed on the system is Red Hat Enterprise Linux 5
oval oval:org.mitre.oval:def:11414
comment The operating system installed on the system is CentOS Linux 5.x
oval oval:org.mitre.oval:def:15802
comment Oracle Linux 5.x
oval oval:org.mitre.oval:def:15459

description

Unspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to an "Improved fix for MOPB-03-2007," probably a variant of CVE-2007-1285.

family

unix

oval:org.mitre.oval:def:11028

status

accepted

submitted

2010-07-09T03:56:16-04:00

title

Unspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to an "Improved fix for MOPB-03-2007," probably a variant of CVE-2007-1285.

version

Redhat

advisories

bugzilla

id	278041
title	CVE-2007-4670 php malformed cookie handling

oval

comment Red Hat Enterprise Linux must be installed
oval oval:com.redhat.rhba:tst:20070304026

AND

comment Red Hat Enterprise Linux 4 is installed
oval oval:com.redhat.rhba:tst:20070304025

AND
comment php-pgsql is earlier than 0:4.3.9-3.22.9
oval oval:com.redhat.rhsa:tst:20070890001
comment php-pgsql is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060276004
AND
comment php-devel is earlier than 0:4.3.9-3.22.9
oval oval:com.redhat.rhsa:tst:20070890003
comment php-devel is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060276028
AND
comment php-gd is earlier than 0:4.3.9-3.22.9
oval oval:com.redhat.rhsa:tst:20070890005
comment php-gd is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060276026
AND
comment php-snmp is earlier than 0:4.3.9-3.22.9
oval oval:com.redhat.rhsa:tst:20070890007
comment php-snmp is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060276014
AND
comment php-imap is earlier than 0:4.3.9-3.22.9
oval oval:com.redhat.rhsa:tst:20070890009
comment php-imap is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060276002
AND
comment php-mysql is earlier than 0:4.3.9-3.22.9
oval oval:com.redhat.rhsa:tst:20070890011
comment php-mysql is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060276010
AND
comment php is earlier than 0:4.3.9-3.22.9
oval oval:com.redhat.rhsa:tst:20070890013
comment php is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060276012
AND
comment php-domxml is earlier than 0:4.3.9-3.22.9
oval oval:com.redhat.rhsa:tst:20070890015
comment php-domxml is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060276022
AND
comment php-xmlrpc is earlier than 0:4.3.9-3.22.9
oval oval:com.redhat.rhsa:tst:20070890017
comment php-xmlrpc is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060276006
AND
comment php-ncurses is earlier than 0:4.3.9-3.22.9
oval oval:com.redhat.rhsa:tst:20070890019
comment php-ncurses is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060276016
AND
comment php-odbc is earlier than 0:4.3.9-3.22.9
oval oval:com.redhat.rhsa:tst:20070890021
comment php-odbc is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060276008
AND
comment php-mbstring is earlier than 0:4.3.9-3.22.9
oval oval:com.redhat.rhsa:tst:20070890023
comment php-mbstring is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060276020
AND
comment php-pear is earlier than 0:4.3.9-3.22.9
oval oval:com.redhat.rhsa:tst:20070890025
comment php-pear is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060276018
AND
comment php-ldap is earlier than 0:4.3.9-3.22.9
oval oval:com.redhat.rhsa:tst:20070890027
comment php-ldap is signed with Red Hat master key
oval oval:com.redhat.rhsa:tst:20060276024

AND

comment Red Hat Enterprise Linux 5 is installed
oval oval:com.redhat.rhba:tst:20070331005

AND
comment php-mysql is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890030
comment php-mysql is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082024
AND
comment php-pgsql is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890032
comment php-pgsql is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082028
AND
comment php is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890034
comment php is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082022
AND
comment php-dba is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890036
comment php-dba is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082032
AND
comment php-soap is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890038
comment php-soap is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082034
AND
comment php-common is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890040
comment php-common is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082038
AND
comment php-odbc is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890042
comment php-odbc is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082010
AND
comment php-mbstring is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890044
comment php-mbstring is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082014
AND
comment php-xml is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890046
comment php-xml is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082008
AND
comment php-ldap is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890048
comment php-ldap is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082012
AND
comment php-xmlrpc is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890050
comment php-xmlrpc is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082036
AND
comment php-ncurses is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890052
comment php-ncurses is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082016
AND
comment php-bcmath is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890054
comment php-bcmath is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082006
AND
comment php-imap is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890056
comment php-imap is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082004
AND
comment php-pdo is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890058
comment php-pdo is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082026
AND
comment php-cli is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890060
comment php-cli is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082030
AND
comment php-devel is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890062
comment php-devel is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082020
AND
comment php-gd is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890064
comment php-gd is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082018
AND
comment php-snmp is earlier than 0:5.1.6-15.el5
oval oval:com.redhat.rhsa:tst:20070890066
comment php-snmp is signed with Red Hat redhatrelease key
oval oval:com.redhat.rhsa:tst:20070082002

rhsa

id	RHSA-2007:0890
released	2008-01-07
severity	Moderate
title	RHSA-2007:0890: php security update (Moderate)

rhsa
id RHSA-2007:0888
rhsa
id RHSA-2007:0889
rhsa
id RHSA-2007:0891

rpms

php-0:4.1.2-2.19
php-devel-0:4.1.2-2.19
php-imap-0:4.1.2-2.19
php-ldap-0:4.1.2-2.19
php-manual-0:4.1.2-2.19
php-mysql-0:4.1.2-2.19
php-odbc-0:4.1.2-2.19
php-pgsql-0:4.1.2-2.19
php-0:4.3.2-43.ent
php-debuginfo-0:4.3.2-43.ent
php-devel-0:4.3.2-43.ent
php-imap-0:4.3.2-43.ent
php-ldap-0:4.3.2-43.ent
php-mysql-0:4.3.2-43.ent
php-odbc-0:4.3.2-43.ent
php-pgsql-0:4.3.2-43.ent
php-0:4.3.9-3.22.9
php-0:5.1.6-15.el5
php-bcmath-0:5.1.6-15.el5
php-cli-0:5.1.6-15.el5
php-common-0:5.1.6-15.el5
php-dba-0:5.1.6-15.el5
php-debuginfo-0:4.3.9-3.22.9
php-debuginfo-0:5.1.6-15.el5
php-devel-0:4.3.9-3.22.9
php-devel-0:5.1.6-15.el5
php-domxml-0:4.3.9-3.22.9
php-gd-0:4.3.9-3.22.9
php-gd-0:5.1.6-15.el5
php-imap-0:4.3.9-3.22.9
php-imap-0:5.1.6-15.el5
php-ldap-0:4.3.9-3.22.9
php-ldap-0:5.1.6-15.el5
php-mbstring-0:4.3.9-3.22.9
php-mbstring-0:5.1.6-15.el5
php-mysql-0:4.3.9-3.22.9
php-mysql-0:5.1.6-15.el5
php-ncurses-0:4.3.9-3.22.9
php-ncurses-0:5.1.6-15.el5
php-odbc-0:4.3.9-3.22.9
php-odbc-0:5.1.6-15.el5
php-pdo-0:5.1.6-15.el5
php-pear-0:4.3.9-3.22.9
php-pgsql-0:4.3.9-3.22.9
php-pgsql-0:5.1.6-15.el5
php-snmp-0:4.3.9-3.22.9
php-snmp-0:5.1.6-15.el5
php-soap-0:5.1.6-15.el5
php-xml-0:5.1.6-15.el5
php-xmlrpc-0:4.3.9-3.22.9
php-xmlrpc-0:5.1.6-15.el5
php-0:5.1.6-3.el4s1.8
php-bcmath-0:5.1.6-3.el4s1.8
php-cli-0:5.1.6-3.el4s1.8
php-common-0:5.1.6-3.el4s1.8
php-dba-0:5.1.6-3.el4s1.8
php-debuginfo-0:5.1.6-3.el4s1.8
php-devel-0:5.1.6-3.el4s1.8
php-gd-0:5.1.6-3.el4s1.8
php-imap-0:5.1.6-3.el4s1.8
php-ldap-0:5.1.6-3.el4s1.8
php-mbstring-0:5.1.6-3.el4s1.8
php-mysql-0:5.1.6-3.el4s1.8
php-ncurses-0:5.1.6-3.el4s1.8
php-odbc-0:5.1.6-3.el4s1.8
php-pdo-0:5.1.6-3.el4s1.8
php-pgsql-0:5.1.6-3.el4s1.8
php-snmp-0:5.1.6-3.el4s1.8
php-soap-0:5.1.6-3.el4s1.8
php-xml-0:5.1.6-3.el4s1.8
php-xmlrpc-0:5.1.6-3.el4s1.8
php-0:5.2.3-3.el5s2
php-bcmath-0:5.2.3-3.el5s2
php-cli-0:5.2.3-3.el5s2
php-common-0:5.2.3-3.el5s2
php-dba-0:5.2.3-3.el5s2
php-debuginfo-0:5.2.3-3.el5s2
php-devel-0:5.2.3-3.el5s2
php-gd-0:5.2.3-3.el5s2
php-imap-0:5.2.3-3.el5s2
php-ldap-0:5.2.3-3.el5s2
php-mbstring-0:5.2.3-3.el5s2
php-mysql-0:5.2.3-3.el5s2
php-ncurses-0:5.2.3-3.el5s2
php-odbc-0:5.2.3-3.el5s2
php-pdo-0:5.2.3-3.el5s2
php-pgsql-0:5.2.3-3.el5s2
php-snmp-0:5.2.3-3.el5s2
php-soap-0:5.2.3-3.el5s2
php-xml-0:5.2.3-3.el5s2
php-xmlrpc-0:5.2.3-3.el5s2

Summary

Vulnerable Configurations

Nessus

Oval

Redhat

References