PHP NULL Character Security Bypass Vulnerability

Bugtraq ID:	44951
Class:	Input Validation Error
CVE:	CVE-2006-7243
Remote:	Yes
Local:	No
Published:	Dec 18 2006 12:00AM
Updated:	Jul 15 2015 12:30AM
Credit:	djcapelis
Vulnerable:	Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 ARM Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Slackware Linux x86_64 -current Slackware Linux -current RedHat Enterprise Linux Desktop Workstation 5 client Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux 5 Server PHP PHP 5.3.2 PHP PHP 5.3.1 PHP PHP 5.3 PHP PHP 5.3.3 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 HP OpenVMS Secure Web Server 7.3 -2 HP OpenVMS Secure Web Server 7.3 -1 HP OpenVMS Secure Web Server 7.3 HP OpenVMS Secure Web Server 7.2 -2 HP OpenVMS Secure Web Server 1.2 HP OpenVMS Secure Web Server 1.1 -1 HP OpenVMS Secure Web Server 2.2 HP OpenVMS Secure Web Server 2.1-1 HP HP-UX Web Server Suite 3.21 HP HP-UX Web Server Suite 3.18 HP HP-UX Web Server Suite 3.17 HP HP-UX Web Server Suite 3.15 HP HP-UX Web Server Suite 3.14 HP HP-UX Web Server Suite 3.13 HP HP-UX Web Server Suite 3.12 HP HP-UX Web Server Suite 3.10 F5 FirePass 6.0.3 F5 FirePass 6.0.2 F5 FirePass 6.0.1 F5 FirePass 7.0 F5 FirePass 6.1 F5 FirePass 6.0.2.3 F5 FirePass 6.0 F5 BigIP Local Traffic Manager (LTM) 8900 10.2.1 HFA3 F5 BigIP Local Traffic Manager (LTM) 6400 10.2.1 HFA3 F5 BigIP Link Controller 10.1 F5 BigIP Link Controller 10.0.1 F5 BigIP Link Controller 10.0 F5 BigIP Global Traffic Manager (GTM) 10.1 F5 BigIP Global Traffic Manager (GTM) 10.0.1 F5 BigIP Global Traffic Manager (GTM) 10.0 F5 BigIP Application Security Manager (ASM) 10.1 F5 BigIP Application Security Manager (ASM) 10.0.1 F5 BigIP Application Security Manager (ASM) 10.0 F5 BIG-IP Protocol Security Manager 10.1 F5 BIG-IP Protocol Security Manager 10.0 CentOS CentOS 5 Avaya IP Office Application Server 8.1 Avaya IP Office Application Server 8.0 Avaya Aura Session Manager 5.2 Avaya Aura Messaging 6.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Messaging 6.0.1 Avaya Aura Messaging 6.0 Avaya Aura Experience Portal 6.0 Avaya Aura Communication Manager Utility Services 6.2 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Communication Manager Utility Services 6.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Communication Manager Utility Services 6.0 Avaya Aura Communication Manager 6.0.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Communication Manager 6.0 Avaya Aura Communication Manager 5.2 Avaya Aura Communication Manager 5.1 + Avaya Communication Manager Server DEFINITY Server SI/CS + Avaya Communication Manager Server S8100 + Avaya Communication Manager Server S8300 + Avaya Communication Manager Server S8500 + Avaya Communication Manager Server S8700 Avaya Aura Application Enablement Services 5.2.1 Avaya Aura Application Enablement Services 6.1.1 Avaya Aura Application Enablement Services 6.1 Avaya Aura Application Enablement Services 5.2.3 Avaya Aura Application Enablement Services 5.2.2 Avaya Aura Application Enablement Services 5.2 Apple Mac OS X Server 10.6.6 Apple Mac OS X Server 10.6.5 Apple Mac OS X Server 10.6.4 Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.6 Apple Mac OS X 10.6.5 Apple Mac OS X 10.6.4 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac OS X 10.6
Not Vulnerable:	PHP PHP 5.3.4 RC1 PHP PHP 5.3.4 HP HP-UX Web Server Suite 3.22 Apple Mac Os X Server 10.6.7

PHP NULL Character Security Bypass Vulnerability

PHP is prone to a security-bypass vulnerability.

A successful exploit could allow an attacker to access sensitive information.

Versions prior to PHP 5.3.4 RC1 are vulnerable.

PHP NULL Character Security Bypass Vulnerability

An attacker can exploit this issue using a browser.

PHP NULL Character Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.


Apple Mac OS X Server 10.6

• Apple MacOSXServerUpdCombo10.6.7.dmg
  For Mac OS X Server v10.6 - v10.6.5
  http://www.apple.com/support/downloads/

Mandriva Linux Mandrake 2010.1 x86_64

• Mandriva apache-mod_php-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64php5_common5-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-apc-3.1.6-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-apc-admin-3.1.6-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-bcmath-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-bz2-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-calendar-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-cgi-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-cli-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ctype-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-curl-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-dba-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-devel-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-doc-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-dom-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-eaccelerator-0.9.6.1-1.2mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-eaccelerator-admin-0.9.6.1-1.2mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-enchant-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-exif-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-fileinfo-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-filter-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-fpm-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ftp-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-gd-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-gearman-0.7.0-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-gettext-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-gmp-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-hash-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-iconv-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-imap-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ini-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-intl-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-json-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ldap-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mailparse-2.1.5-8.2mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mbstring-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mcal-0.6-35.2mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mcrypt-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mssql-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mysql-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mysqli-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-odbc-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-openssl-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-optimizer-0.1-0.alpha2.8.2mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pcntl-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_dblib-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_mysql-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_odbc-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_pgsql-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_sqlite-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pgsql-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-phar-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pinba-0.0.5-2.2mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-posix-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pspell-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-readline-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-recode-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sasl-0.1.0-33.2mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-session-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-shmop-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-snmp-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-soap-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sockets-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sphinx-1.0.4-2.2mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sqlite3-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ssh2-0.11.2-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-suhosin-0.9.32.1-0.2mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sybase_ct-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sysvmsg-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sysvsem-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sysvshm-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-tclink-3.4.5-7.2mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-tidy-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-timezonedb-2010.15-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-tokenizer-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-translit-0.6.0-15.2mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-vld-0.10.1-1.2mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-wddx-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xattr-1.1.0-13.2mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xdebug-2.1.0-0.3mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xml-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xmlreader-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xmlrpc-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xmlwriter-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xsl-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-zip-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-zlib-5.3.4-0.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Mandriva Linux Mandrake 2010.0

• Mandriva apache-mod_php-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libphp5_common5-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-apc-3.1.6-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-apc-admin-3.1.6-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-bcmath-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-bz2-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-calendar-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-cgi-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-cli-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ctype-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-curl-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-dba-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-devel-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-dio-0.0.2-6.3mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-doc-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-dom-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-eaccelerator-0.9.6.1-0.3mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-eaccelerator-admin-0.9.6.1-0.3mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-enchant-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-exif-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-fam-5.0.1-10.3mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-fileinfo-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-filepro-5.1.6-20.3mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-filter-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-fpm-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ftp-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-gd-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-gettext-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-gmp-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-hash-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-iconv-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-idn-1.2b-18.3mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-imap-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ini-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-intl-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-json-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ldap-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mailparse-2.1.5-3.3mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mbstring-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mcal-0.6-30.3mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mcrypt-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mssql-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mysql-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-mysqli-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-odbc-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-openssl-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-optimizer-0.1-0.alpha2.3.3mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pcntl-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_dblib-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_mysql-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_odbc-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_pgsql-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pdo_sqlite-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pgsql-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-phar-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-posix-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-pspell-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-readline-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-recode-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sasl-0.1.0-28.3mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-session-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-shmop-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-snmp-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-soap-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sockets-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sqlite3-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-ssh2-0.11.2-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-suhosin-0.9.32.1-0.2mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sybase_ct-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sysvmsg-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sysvsem-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-sysvshm-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-tclink-3.4.5-1.3mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-tidy-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-timezonedb-2010.15-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-tokenizer-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-translit-0.6.0-10.3mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-vld-0.10.1-0.3mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-wddx-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xattr-1.1.0-9.3mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xdebug-2.1.0-0.3mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xml-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xmlreader-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xmlrpc-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xmlwriter-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-xsl-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-zip-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva php-zlib-5.3.4-0.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/

Apple Mac OS X 10.6

• Apple MacOSXUpdCombo10.6.7.dmg
  For Mac OS X v10.6 - v10.6.5
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.1

• Apple MacOSXServerUpdCombo10.6.7.dmg
  For Mac OS X Server v10.6 - v10.6.5
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.1

• Apple MacOSXUpdCombo10.6.7.dmg
  For Mac OS X v10.6 - v10.6.5
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.2

• Apple MacOSXServerUpdCombo10.6.7.dmg
  For Mac OS X Server v10.6 - v10.6.5
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.3

• Apple MacOSXUpdCombo10.6.7.dmg
  For Mac OS X v10.6 - v10.6.5
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.6.4

• Apple MacOSXUpdCombo10.6.7.dmg
  For Mac OS X v10.6 - v10.6.5
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.4

• Apple MacOSXServerUpdCombo10.6.7.dmg
  For Mac OS X Server v10.6 - v10.6.5
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.6

• Apple MacOSXServerUpd10.6.7.dmg
  For Mac OS X Server v10.6.6
  http://www.apple.com/support/downloads/

PHP NULL Character Security Bypass Vulnerability

References:

• #39863 file_exists() silently truncates after a null byte (PHP)
  
• NULL byte poisoning fix in php 5.3.4+ (Pierre Joye)
  
• Null bytes related issues (PHP)
  
• PHP 5.3.4 Released! (PHP)
  
• PHP Homepage (PHP)
  
• sol13519: Multiple PHP vulnerabilities (F5 Networks)