PHP prior to 5.3.4 Multiple Vulnerabilities
BID:46168
Info
PHP prior to 5.3.4 Multiple Vulnerabilities
| Bugtraq ID: | 46168 |
| Class: | Unknown |
| CVE: |
CVE-2011-0753 CVE-2011-0754 CVE-2011-0755 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Sep 06 2010 12:00AM |
| Updated: | Apr 05 2011 02:55PM |
| Credit: | Nick Telford, v-sumada, atomo64. |
| Vulnerable: |
SuSE SUSE Linux Enterprise 11 SP1 SuSE SUSE Linux Enterprise 10 SP4 SuSE SUSE Linux Enterprise 10 SP3 SuSE openSUSE 11.3 S.u.S.E. openSUSE 11.2 PHP PHP 5.3.2 PHP PHP 5.3.1 PHP PHP 5.3 PHP PHP 5.2.17 PHP PHP 5.2.15 PHP PHP 5.2.13 PHP PHP 5.2.12 PHP PHP 5.2.11 PHP PHP 5.2.10 PHP PHP 5.2.9 PHP PHP 5.2.8 PHP PHP 5.2.7 PHP PHP 5.2.6 PHP PHP 5.2.5 PHP PHP 5.2.4 PHP PHP 5.2.3 PHP PHP 5.2.2 PHP PHP 5.2.1 PHP PHP 5.1.6 PHP PHP 5.1.5 PHP PHP 5.1.4 PHP PHP 5.1.3 PHP PHP 5.1.2 PHP PHP 5.1.1 PHP PHP 5.1 PHP PHP 5.0.5 PHP PHP 5.0.4 PHP PHP 5.0.3 PHP PHP 5.0.2 PHP PHP 5.0.1 PHP PHP 5.3.3 PHP PHP 5.2.14 PHP PHP 5.2 |
| Not Vulnerable: |
PHP PHP 5.3.4 |
Discussion
PHP prior to 5.3.4 Multiple Vulnerabilities
PHP is prone to multiple security vulnerabilities.
Attackers can exploit these issues to cause a denial-of-service attack, perform symbolic-link attacks, and to execute arbitrary code in the context of the affected application.
Versions prior to PHP 5.3.4 are vulnerable.
PHP is prone to multiple security vulnerabilities.
Attackers can exploit these issues to cause a denial-of-service attack, perform symbolic-link attacks, and to execute arbitrary code in the context of the affected application.
Versions prior to PHP 5.3.4 are vulnerable.
Exploit / POC
PHP prior to 5.3.4 Multiple Vulnerabilities
Exploiting some of these issues depends on the configuration of the application employing the vulnerable PHP version. To exploit some of these issues, an attacker must have local access; for other issues, the attacker can use a browser.
Exploiting some of these issues depends on the configuration of the application employing the vulnerable PHP version. To exploit some of these issues, an attacker must have local access; for other issues, the attacker can use a browser.
Solution / Fix
PHP prior to 5.3.4 Multiple Vulnerabilities
Solution:
Updates are available. Please see the reference for more details.
Solution:
Updates are available. Please see the reference for more details.
References
PHP prior to 5.3.4 Multiple Vulnerabilities
References:
References: