Lucene search
+L

Fedora Update for php FEDORA-2010-19011

🗓️ 11 Jan 2011 00:00:00Reported by Copyright (c) 2010 Greenbone Networks GmbHType 
openvas
 openvas
🔗 plugins.openvas.org👁 58 Views

Fedora Update for php FEDORA-2010-19011 - PHP language module for Apache HTTP Serve

Related
Refs
Code
ReporterTitlePublishedViews
Family
zdt
PHP 5.3.3/5.2.14 ZipArchive::getArchiveComment NULL Pointer Deference
6 Nov 201000:00
zdt
zdt
PHP 5.3.3 NumberFormatter::getSymbol Integer Overflow
11 Dec 201000:00
zdt
FreeBSD
php-imap -- Denial of Service
13 Dec 201000:00
freebsd
FreeBSD
php-zip -- multiple Denial of Service vulnerabilities
13 Dec 201000:00
freebsd
FreeBSD
php -- multiple vulnerabilities
14 May 201500:00
freebsd
FreeBSD
php -- NULL byte poisoning
10 Dec 201000:00
freebsd
FreeBSD
php -- open_basedir bypass
10 Dec 201000:00
freebsd
FreeBSD
php-filter -- Denial of Service
13 Dec 201000:00
freebsd
Tenable Nessus
PHP < 5.2.11 Multiple Vulnerabilities
18 Sep 200900:00
nessus
Tenable Nessus
PHP 5.3.x < 5.3.4 Multiple Vulnerabilities
10 Dec 201000:00
nessus
Rows per page
###############################################################################
# OpenVAS Vulnerability Test
#
# Fedora Update for php FEDORA-2010-19011
#
# Authors:
# System Generated Check
#
# Copyright:
# Copyright (c) 2010 Greenbone Networks GmbH, http://www.greenbone.net
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2
# (or any later version), as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
###############################################################################

include("revisions-lib.inc");
tag_insight = "PHP is an HTML-embedded scripting language. PHP attempts to make it
  easy for developers to write dynamically generated web pages. PHP also
  offers built-in database integration for several commercial and
  non-commercial database management systems, so writing a
  database-enabled webpage with PHP is fairly simple. The most common
  use of PHP coding is probably as a replacement for CGI scripts.

  The php package contains the module which adds support for the PHP
  language to Apache HTTP Server.";
tag_solution = "Please Install the Updated Packages.";

tag_affected = "php on Fedora 13";


if(description)
{
  script_xref(name : "URL" , value : "http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052837.html");
  script_id(862764);
  script_version("$Revision: 6626 $");
  script_tag(name:"last_modification", value:"$Date: 2017-07-10 08:30:10 +0200 (Mon, 10 Jul 2017) $");
  script_tag(name:"creation_date", value:"2011-01-11 16:07:49 +0100 (Tue, 11 Jan 2011)");
  script_tag(name:"cvss_base", value:"6.8");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:P/I:P/A:P");
  script_xref(name: "FEDORA", value: "2010-19011");
  script_cve_id("CVE-2006-7243", "CVE-2010-4150", "CVE-2010-3709", "CVE-2010-3436", "CVE-2010-2950", "CVE-2010-3710", "CVE-2010-3870", "CVE-2010-4156", "CVE-2009-5016", "CVE-2010-4409");
  script_name("Fedora Update for php FEDORA-2010-19011");

  script_summary("Check for the Version of php");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (c) 2010 Greenbone Networks GmbH");
  script_family("Fedora Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/fedora", "ssh/login/rpms");
  script_tag(name : "affected" , value : tag_affected);
  script_tag(name : "insight" , value : tag_insight);
  script_tag(name : "solution" , value : tag_solution);
  script_tag(name:"qod_type", value:"package");
  script_tag(name:"solution_type", value:"VendorFix");
  exit(0);
}


include("pkg-lib-rpm.inc");

release = get_kb_item("ssh/login/release");


res = "";
if(release == NULL){
  exit(0);
}

if(release == "FC13")
{

  if ((res = isrpmvuln(pkg:"php", rpm:"php~5.3.4~1.fc13.1", rls:"FC13")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if (__pkg_match) exit(99); # Not vulnerable.
  exit(0);
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation