7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Several remote vulnerabilities have been discovered in PHP, a
server-side, HTML-embedded scripting language, which may lead to the
execution of arbitrary code. The Common Vulnerabilities and Exposures
project identifies the following problems:
For the oldstable distribution (sarge) these problems have been fixed
in version 4.3.10-22.
For the stable distribution (etch) these problems have been fixed
in version 4.4.4-8+etch4.
The unstable distribution (sid) no longer contains php4.
We recommend that you upgrade your PHP packages. Sarge packages for
hppa, mips and powerpc are not yet available, due to problems on the
build hosts. They will be provided later.
CPE | Name | Operator | Version |
---|---|---|---|
php4 | eq | 6:4.4.4-8+etch2 | |
php4 | eq | 6:4.4.4-8+etch3 | |
php4 | eq | 6:4.4.4-8+etch1 |