Zend Platform Multiple Remote Vulnerabilities
BID:19692
CVE-2006-4431 |Info
Zend Platform Multiple Remote Vulnerabilities
| Bugtraq ID: | 19692 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 24 2006 12:00AM |
| Updated: | Aug 31 2006 03:18PM |
| Credit: | Stefan Esser is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Zend Zend Platform 2.2.1 |
| Not Vulnerable: |
Zend Zend Platform 2.2.1a |
Discussion
Zend Platform Multiple Remote Vulnerabilities
Zend Platform is prone to multiple vulnerabilities:
- multiple buffer-overflow vulnerabilities
- a denial-of-service vulnerability
- a directory-traversal vulnerability.
An attacker can exploit these issue to cause a denial of service within the context of the affected module and daemon, to create files in arbitrary locations with attacker-supplied data, and to execute arbitrary code.
These issues affect version 2.2.1 and earlier.
Zend Platform is prone to multiple vulnerabilities:
- multiple buffer-overflow vulnerabilities
- a denial-of-service vulnerability
- a directory-traversal vulnerability.
An attacker can exploit these issue to cause a denial of service within the context of the affected module and daemon, to create files in arbitrary locations with attacker-supplied data, and to execute arbitrary code.
These issues affect version 2.2.1 and earlier.
Exploit / POC
Zend Platform Multiple Remote Vulnerabilities
Some of these issues do not require specific exploit code.
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Some of these issues do not require specific exploit code.
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
Zend Platform Multiple Remote Vulnerabilities
Solution:
The vendor has released version 2.2.1a to address these issues. Please contact the vendor for information on obtaining and applying the appropriate updates.
Solution:
The vendor has released version 2.2.1a to address these issues. Please contact the vendor for information on obtaining and applying the appropriate updates.
References
Zend Platform Multiple Remote Vulnerabilities
References:
References:
- Zend Platform Multiple Remote Vulnerabilities (Stefan Esser )