php: multiple vulnerabilities [LWN.net]

Package(s):

php

CVE #(s):

CVE-2006-0207 CVE-2006-0208

Created:

February 2, 2006

Updated:

March 23, 2006

Description:

PHP has a response splitting vulnerability, remote attackers can inject arbitrary HTTP headers via an unknown method, possibly using a Set-Cookie header. Also, a number of cross-site scripting vulnerabilities can be used by remote attackers to inject arbitrary web scripts or html pages.

Alerts:

Gentoo	200603-22	2006-03-22
Ubuntu	USN-261-1	2006-03-10
Mandriva	MDKSA-2006:028	2006-02-01

(Log in to post comments)