php: multiple vulnerabilities [LWN.net]

Package(s):

php

CVE #(s):

CVE-2005-3390 CVE-2005-3389 CVE-2005-3388 CVE-2005-3353

Created:

November 8, 2005

Updated:

December 23, 2005

Description:

There are multiple vulnerabilities in PHP, including malicious requests may overwrite the GLOBALS array, the parse_str() function may enable the register_globals setting, cross-site scripting bugs in phpinfo() and a bug in EXIF image parsing that may crash the process.

Alerts:

Ubuntu	USN-232-1	2005-12-23
SuSE	SUSE-SA:2005:069	2005-12-14
SuSE	SUSE-SR:2005:029	2005-12-09
OpenPKG	OpenPKG-SA-2005.027	2005-12-03
Fedora-Legacy	FLSA:166943	2005-11-28
Mandriva	MDKSA-2005:213	2005-11-16
Gentoo	200511-08	2005-11-13
Red Hat	RHSA-2005:838-01	2005-11-10
Red Hat	RHSA-2005:831-01	2005-11-10
Fedora	FEDORA-2005-1061	2005-11-08
Fedora	FEDORA-2005-1062	2005-11-08

(Log in to post comments)