Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline

openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-61)

πŸ—“οΈΒ 21 Jul 2009Β 00:00:00Reported byΒ This script is Copyright (C) 2009-2021 Tenable Network Security, Inc.TypeΒ 
nessus
Β nessusπŸ”—Β www.tenable.comπŸ‘Β 36Β Views

The remote openSUSE host is missing a security update for apache2-mod_php

Show more
Related
Refs
Code
ReporterTitlePublishedViews
Family
Tenable Nessus		openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-5379)
2 Jul 200800:00
–nessus
Tenable Nessus		Debian DSA-1572-1 : php5 - several vulnerabilities
13 May 200800:00
–nessus
Tenable Nessus		Slackware 10.2 / 11.0 / 12.0 / 12.1 / current : php (SSA:2008-128-01)
28 May 200800:00
–nessus
Tenable Nessus		PHP < 5.2.6 Multiple Vulnerabilities
2 May 200800:00
–nessus
Tenable Nessus		Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : php5 vulnerabilities (USN-628-1)
24 Jul 200800:00
–nessus
Tenable Nessus		Fedora 9 : php-5.2.6-2.fc9 (2008-3606)
24 Jun 200800:00
–nessus
Tenable Nessus		FreeBSD : php -- integer overflow vulnerability (f6377f08-12a7-11dd-bab7-0016179b2dd5)
2 May 200800:00
–nessus
Tenable Nessus		Mandriva Linux Security Advisory : php (MDVSA-2008:128)
23 Apr 200900:00
–nessus
Tenable Nessus		RHEL 3 / 5 : php (RHSA-2008:0544)
16 Jul 200800:00
–nessus
Tenable Nessus		RHEL 4 : php (RHSA-2008:0545)
16 Jul 200800:00
–nessus
Rows per page
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from openSUSE Security Update apache2-mod_php5-61.
#
# The text description of this plugin is (C) SUSE LLC.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(39912);
  script_version("1.14");
  script_set_attribute(attribute:"plugin_modification_date", value:"2021/01/14");

  script_cve_id("CVE-2008-1384", "CVE-2008-2050", "CVE-2008-2051", "CVE-2008-2107");

  script_name(english:"openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-61)");
  script_summary(english:"Check for the apache2-mod_php5-61 patch");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote openSUSE host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"This update of php5 fixes :

  - possible stack-based buffer overflow CVE-2008-2050

  - incomplete escapeshellcmd() CVE-2008-2051

  - printf() integer overflow CVE-2008-1384

  - insecure GENERATE_SEED macro CVE-2008-2107

  - timezone update for DST in Pakistan"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.novell.com/show_bug.cgi?id=373120"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.novell.com/show_bug.cgi?id=386632"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.novell.com/show_bug.cgi?id=387745"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.novell.com/show_bug.cgi?id=388130"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.novell.com/show_bug.cgi?id=397374"
  );
  script_set_attribute(
    attribute:"solution", 
    value:"Update the affected apache2-mod_php5 packages."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_cwe_id(119, 189);

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:apache2-mod_php5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-bcmath");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-bz2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-calendar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-ctype");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-curl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-dba");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-dbase");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-dom");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-exif");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-fastcgi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-ftp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-gd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-gettext");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-gmp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-hash");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-iconv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-imap");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-json");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-ldap");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-mbstring");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-mcrypt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-mysql");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-ncurses");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-odbc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-openssl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-pcntl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-pdo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-pear");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-pgsql");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-posix");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-pspell");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-readline");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-shmop");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-snmp");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-soap");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-sockets");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-sqlite");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-suhosin");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-sysvmsg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-sysvsem");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-sysvshm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-tidy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-tokenizer");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-wddx");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-xmlreader");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-xmlrpc");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-xmlwriter");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-xsl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-zip");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:php5-zlib");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:11.0");

  script_set_attribute(attribute:"patch_publication_date", value:"2008/06/25");
  script_set_attribute(attribute:"plugin_publication_date", value:"2009/07/21");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2009-2021 Tenable Network Security, Inc.");
  script_family(english:"SuSE Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
if (release !~ "^(SUSE11\.0)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "11.0", release);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

ourarch = get_kb_item("Host/cpu");
if (!ourarch) audit(AUDIT_UNKNOWN_ARCH);
if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch);

flag = 0;

if ( rpm_check(release:"SUSE11.0", reference:"apache2-mod_php5-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-bcmath-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-bz2-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-calendar-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-ctype-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-curl-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-dba-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-dbase-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-devel-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-dom-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-exif-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-fastcgi-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-ftp-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-gd-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-gettext-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-gmp-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-hash-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-iconv-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-imap-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-json-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-ldap-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-mbstring-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-mcrypt-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-mysql-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-ncurses-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-odbc-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-openssl-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-pcntl-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-pdo-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-pear-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-pgsql-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-posix-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-pspell-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-readline-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-shmop-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-snmp-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-soap-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-sockets-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-sqlite-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-suhosin-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-sysvmsg-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-sysvsem-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-sysvshm-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-tidy-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-tokenizer-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-wddx-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-xmlreader-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-xmlrpc-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-xmlwriter-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-xsl-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-zip-5.2.6-0.1") ) flag++;
if ( rpm_check(release:"SUSE11.0", reference:"php5-zlib-5.2.6-0.1") ) flag++;

if (flag)
{
  if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
  else security_hole(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "php5");
}

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. ContactΒ us for a demo andΒ discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
21 Jul 2009 00:00Current
1.1Low risk
Vulners AI Score1.1
CVSS210
EPSS0.024
opensusesecurity updateapache2-mod_php5-61cve-2008-1384cve-2008-2050cve-2008-2051cve-2008-2107stack-based buffer overflowescapeshellcmdprintfgenerate_seedtimezone updatedstpakistanupdateapache2-mod_php5php5php5-bcmathphp5-bz2php5-calendarphp5-ctypephp5-curlphp5-dbaphp5-dbasephp5-develphp5-domphp5-exifphp5-fastcgiphp5-ftpphp5-gdphp5-gettextphp5-gmpphp5-hashphp5-iconvphp5-imapphp5-jsonphp5-ldap
36
.json
Report