SUSE-SA:2006:052: php4,php5

The remote host is missing the patch for the advisory SUSE-SA:2006:052 php4,php5. Various security problems have been fixed in the PHP script language engine and its modules, versions 4 and 5. The PHP4 updated packages were released on September 12, the PHP5 update packages were released on...

CVE-2006-4483

CVE-2006-4483 affects PHP 5.1.x before 5.1.5, specifically the curl extension files ext/curl/interface.c and ext/curl/streams.c. When open_basedir or safe_mode are enabled, CURLOPT_FOLLOWLOCATION is permitted, which can enable unauthorized actions and may relate to the realpath cache. Public advi...