Lucene search

K
openvasCopyright (C) 2009 E-Soft Inc.OPENVAS:136141256231065329
HistoryOct 10, 2009 - 12:00 a.m.

SLES9: Security update for PHP4

2009-10-1000:00:00
Copyright (C) 2009 E-Soft Inc.
plugins.openvas.org
14

7.5 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.492 Medium

EPSS

Percentile

97.5%

The remote host is missing updates to packages that affect
the security of your system. One or more of the following packages
are affected:

php4-imap
php4-gd
php4-mysql
php4-session
php4-pgsql
php4-fastcgi
php4-mbstring
php4-recode
php4
apache2-mod_php4
php4-curl
php4-sysvshm
mod_php4-servlet
mod_php4-core
php4-wddx
php4-exif
php4-pear
php4-servlet
php4-devel
apache-mod_php4

For more information, please visit the referenced security
advisories.

More details may also be found by searching for keyword
5009430 within the SuSE Enterprise Server 9 patch
database linked in the references.

# SPDX-FileCopyrightText: 2009 E-Soft Inc.
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.65329");
  script_version("2023-07-18T05:05:36+0000");
  script_tag(name:"last_modification", value:"2023-07-18 05:05:36 +0000 (Tue, 18 Jul 2023)");
  script_tag(name:"creation_date", value:"2009-10-10 16:11:46 +0200 (Sat, 10 Oct 2009)");
  script_cve_id("CVE-2006-5465");
  script_tag(name:"cvss_base", value:"7.5");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_name("SLES9: Security update for PHP4");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2009 E-Soft Inc.");
  script_family("SuSE Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/suse_sles", "ssh/login/rpms", re:"ssh/login/release=SLES9\.0");
  script_tag(name:"solution", value:"Please install the updates provided by SuSE.");
  script_tag(name:"summary", value:"The remote host is missing updates to packages that affect
the security of your system.  One or more of the following packages
are affected:

    php4-imap
    php4-gd
    php4-mysql
    php4-session
    php4-pgsql
    php4-fastcgi
    php4-mbstring
    php4-recode
    php4
    apache2-mod_php4
    php4-curl
    php4-sysvshm
    mod_php4-servlet
    mod_php4-core
    php4-wddx
    php4-exif
    php4-pear
    php4-servlet
    php4-devel
    apache-mod_php4

For more information, please visit the referenced security
advisories.

More details may also be found by searching for keyword
5009430 within the SuSE Enterprise Server 9 patch
database linked in the references.");

  script_xref(name:"URL", value:"http://download.novell.com/patch/finder/");

  script_tag(name:"qod_type", value:"package");
  script_tag(name:"solution_type", value:"VendorFix");

  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-rpm.inc");

res = "";
report = "";
if ((res = isrpmvuln(pkg:"php4-imap", rpm:"php4-imap~4.3.4~43.72", rls:"SLES9.0")) != NULL) {
    report += res;
}

if (report != "") {
    security_message(data:report);
} else if (__pkg_match) {
    exit(99);
}

7.5 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.492 Medium

EPSS

Percentile

97.5%