Security Advisory SA24945 - rPath update for php, php-mysql, and php-pgsql

Overview

Advisories

Research

Forums

Create Profile

Our Commitment

Database

Advisories by Product

Advisories by Vendor

Terminology

Report Vulnerability

Insecure Library Loading

Secunia Advisory SA24945

rPath update for php, php-mysql, and php-pgsql

Secunia Advisory

SA24945

Release Date

2007-04-19

Popularity

9,159 views

Comments

0 comments

Criticality level

Moderately critical

Impact

Security Bypass
DoS
System access

Where

From remote

Authentication level

This information is available to Secunia VIM customers

Report reliability

This information is available to Secunia VIM customers

Solution Status

Vendor Patch

Systems affected

This information is available to Secunia VIM customers

Approve distribution

This information is available to Secunia VIM customers

Operating System

rPath Linux 1.x

Secunia CVSS Score

This information is available to Secunia VIM Customers

CVE Reference(s)

CVE-2007-0455 CVSS score available to Secunia VIM customers
CVE-2007-0906 CVSS score available to Secunia VIM customers
CVE-2007-0910 CVSS score available to Secunia VIM customers
CVE-2007-1001 CVSS score available to Secunia VIM customers
CVE-2007-1285 CVSS score available to Secunia VIM customers
CVE-2007-1286 CVSS score available to Secunia VIM customers
CVE-2007-1583 CVSS score available to Secunia VIM customers
CVE-2007-1711 CVSS score available to Secunia VIM customers

Description

rPath has issued an update for php, php-mysql, and php-pgsql. This fixes some vulnerabilities, which can be exploited by malicious, local users to bypass certain security restrictions, and by malicious people to cause a DoS (Denial of Service) and potentially compromise a user's system.

For more information:
SA23916
SA24089
SA24440
SA24814

Solution
Update to the latest versions:
Further details available to Secunia VIM customers

Original Advisory
http://lists.rpath.com/pipermail/security-announce/2007-April/000176.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers

Do you have additional information related to this advisory?

Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com

Subject: rPath update for php, php-mysql, and php-pgsql

No posts yet

Secunia Advisory SA24945

rPath update for php, php-mysql, and php-pgsql

Do you have additional information related to this advisory?

You must be logged in to post a comment.

Secunia Customer Login

Not a customer already?