Advisories:rPSA-2006-0056

From rPath Wiki

rPath Security Advisory 2006-0056-1

Published: 2006-05-01

Products

• rPath Linux 1

Rating

Severe

Exposure Level Classification

Remote System User Deterministic Unauthorized Access

Updated Versions

• php=conary.rpath.com@rpl:1/4.3.11-15.5-1
• php-mysql=conary.rpath.com@rpl:1/4.3.11-15.5-1
• php-pgsql=conary.rpath.com@rpl:1/4.3.11-15.5-1

rPath Issue Tracking System

• RPL-345

References

• CVE-2005-3353
• CVE-2005-3388
• CVE-2005-3389
• CVE-2005-3390
• CVE-2005-3883
• CVE-2006-0208
• CVE-2006-0996

Description

Multiple vulnerabilities have been fixed in PHP, including remote

denial of service, cross-site scripting (XSS), privilege escalation,

and data injection. These vulnerabilities are generally capable of

allowing attackers to exploit arbitrary PHP programs.

Copyright 2006 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html