From: Secunia Security Advisories (sec-advsecunia.com)
Date: Wed Dec 22 2004 - 02:37:10 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
Fedora update for PHP

SECUNIA ADVISORY ID:
SA13611

VERIFY ADVISORY:
http://secunia.com/advisories/13611/

CRITICAL:
Highly critical

IMPACT:
System access, DoS, Privilege escalation, Security Bypass

WHERE:
From remote

OPERATING SYSTEM:
Fedora Core 3
http://secunia.com/product/4222/
Fedora Core 2
http://secunia.com/product/3489/

DESCRIPTION:
Fedora has issued an update for PHP. This fixes some vulnerabilities,
which can be exploited to gain escalated privileges, bypass certain
security restrictions, gain knowledge of sensitive information, or
compromise a vulnerable system.

For more information:
SA13481

SOLUTION:
Apply updates.

Fedora Core 2:

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/

38edfb5c4e7d80e48cad36edf9e913eb SRPMS/php-4.3.10-2.4.src.rpm
a22bafc119a7797734e229822b06547e x86_64/php-4.3.10-2.4.x86_64.rpm
27783eff866e3bfdc21c7fd55f1ee074
x86_64/php-devel-4.3.10-2.4.x86_64.rpm
3a39de1daf5968d95fd448c9a8e828ac
x86_64/php-pear-4.3.10-2.4.x86_64.rpm
57d065191d398e2bf5e7f120edb16b1a
x86_64/php-imap-4.3.10-2.4.x86_64.rpm
455727fdab0cc5e663e17e49798390d7
x86_64/php-ldap-4.3.10-2.4.x86_64.rpm
92058f2eb9e69e7bcea782bd192b62d2
x86_64/php-mysql-4.3.10-2.4.x86_64.rpm
b51a9e94030e181f818a9ffa13f9750e
x86_64/php-pgsql-4.3.10-2.4.x86_64.rpm
fe0955c89ccde1a7ea7262f63b1e19d1
x86_64/php-odbc-4.3.10-2.4.x86_64.rpm
534bee14e259752b34205f69fe1154fe
x86_64/php-snmp-4.3.10-2.4.x86_64.rpm
2c8ce07785064953a6601ab87250db6a
x86_64/php-domxml-4.3.10-2.4.x86_64.rpm
da393f75760e8ffbf6112bfb71927c9f
x86_64/php-xmlrpc-4.3.10-2.4.x86_64.rpm
66a25b26811a0283501bec4dda66025b
x86_64/php-mbstring-4.3.10-2.4.x86_64.rpm
2d5a82279db93b080afef08cce548af8
x86_64/debug/php-debuginfo-4.3.10-2.4.x86_64.rpm
1b3ceb6fb4bb0bbd05c92aec1efad13a i386/php-4.3.10-2.4.i386.rpm
8f9685a4e87435eae2543ab0e70ae956 i386/php-devel-4.3.10-2.4.i386.rpm
56893f09067be4bab725e8b8de72f6b5 i386/php-pear-4.3.10-2.4.i386.rpm
bed7a3018a037c024c35fc448ff426b9 i386/php-imap-4.3.10-2.4.i386.rpm
8ccab4ad5130bcb5718d8e449e712524 i386/php-ldap-4.3.10-2.4.i386.rpm
9a9b97820a029f693a6a14a83e017116 i386/php-mysql-4.3.10-2.4.i386.rpm
071e96181e24fca3a38b2a680cf1d5c0 i386/php-pgsql-4.3.10-2.4.i386.rpm
47d4beeb30cd032904341bbad9e9158f i386/php-odbc-4.3.10-2.4.i386.rpm
39cedd45d34ad1b2d85902169bed5b29 i386/php-snmp-4.3.10-2.4.i386.rpm
79f5b45c4176d46004c9118d459c83ae i386/php-domxml-4.3.10-2.4.i386.rpm
f53752308cc7058ec829a21ebb9ea7d3 i386/php-xmlrpc-4.3.10-2.4.i386.rpm
e151913faeecbeaf4e6549e03151e644
i386/php-mbstring-4.3.10-2.4.i386.rpm
63020b5ede3e55d1aeaf48365e2be374
i386/debug/php-debuginfo-4.3.10-2.4.i386.rpm

Fedora Core 3:

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

445609a1342e91f32320fa5864bda37b SRPMS/php-4.3.10-3.2.src.rpm
657606317c0a9ed5bcf37f06dba42538 x86_64/php-4.3.10-3.2.x86_64.rpm
5ddda1be3f052f3cb409cf73363be2ae
x86_64/php-devel-4.3.10-3.2.x86_64.rpm
9163bfe74081828227f757b133b076fc
x86_64/php-pear-4.3.10-3.2.x86_64.rpm
80b7bf655541e14064c2bd6eaa311077
x86_64/php-imap-4.3.10-3.2.x86_64.rpm
e7e92d9b5bd9ea4a245eba6a39ee2536
x86_64/php-ldap-4.3.10-3.2.x86_64.rpm
eae6fbeb1108970cd8fd9a7a38d32a9a
x86_64/php-mysql-4.3.10-3.2.x86_64.rpm
88dcfa1990eb7bdbdd92715dace2c03e
x86_64/php-pgsql-4.3.10-3.2.x86_64.rpm
05966b8d09a58702ba43c9be149ecbaa
x86_64/php-odbc-4.3.10-3.2.x86_64.rpm
34cdb5151b5da048f7470170bfb31978
x86_64/php-snmp-4.3.10-3.2.x86_64.rpm
df3d6d00a6949d17495c8b99eac5f7c9
x86_64/php-domxml-4.3.10-3.2.x86_64.rpm
7422b0dc974e702a4c96eeecf11ec761
x86_64/php-xmlrpc-4.3.10-3.2.x86_64.rpm
c1d70465ed28e238c4a09cbcb356b209
x86_64/php-mbstring-4.3.10-3.2.x86_64.rpm
16a82e15b0e5b3b16fc5eda47133b2f6
x86_64/php-ncurses-4.3.10-3.2.x86_64.rpm
eea5e17b82709e33619fa4959db5c766 x86_64/php-gd-4.3.10-3.2.x86_64.rpm
b969eb4dc267a438bb7eb742e6c20f2b
x86_64/debug/php-debuginfo-4.3.10-3.2.x86_64.rpm
f510eb1784120ca41c69d7adc189852b i386/php-4.3.10-3.2.i386.rpm
d5f291074444c1dc04f36cedf7395a06 i386/php-devel-4.3.10-3.2.i386.rpm
652ca5be92e965c23150c9c58f875a5c i386/php-pear-4.3.10-3.2.i386.rpm
11399157471806b342090305ef29c474 i386/php-imap-4.3.10-3.2.i386.rpm
190d53059632b6b80b9f757742ae9a60 i386/php-ldap-4.3.10-3.2.i386.rpm
6fc5c6d4a9326e2bb7208573fead0510 i386/php-mysql-4.3.10-3.2.i386.rpm
5c88f752e470135c5c665ef8fb1284d9 i386/php-pgsql-4.3.10-3.2.i386.rpm
4b0eb8f79673794cf6a677cbc3ae255d i386/php-odbc-4.3.10-3.2.i386.rpm
a4f62eb0dd02593f9529b141bde10676 i386/php-snmp-4.3.10-3.2.i386.rpm
3591ab4da5e4efe7cd1e1876d589b173 i386/php-domxml-4.3.10-3.2.i386.rpm
0ddcc0fe3c79a2545d8bb2235837044c i386/php-xmlrpc-4.3.10-3.2.i386.rpm
1eae4104b33ee7021403025865de92e0
i386/php-mbstring-4.3.10-3.2.i386.rpm
c7fb403a6374fdb70adbadc62eb022cf
i386/php-ncurses-4.3.10-3.2.i386.rpm
606c76b1b4e9b0fdd6de1a093ce3190b i386/php-gd-4.3.10-3.2.i386.rpm
864a01494e29026096135b3229363025
i386/debug/php-debuginfo-4.3.10-3.2.i386.rpm

OTHER REFERENCES:
SA13481:
http://secunia.com/advisories/13481/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]