php-pear: remote code execution

Package(s):

php-pear

CVE #(s):

CAN-2005-1921

Created:

July 1, 2005

Updated:

July 29, 2005

Description:

The PEAR XMLRPC implementation has a vulnerability that can be exploited for remote code execution. See this report from GulfTech Security Research. This vulnerability affects a large number of PHP web applications.

Alerts:

Fedora-Legacy	FLSA:163559	php	2005-07-28
Conectiva	CLA-2005:980	php4	2005-07-14
Gentoo	200507-15	php	2005-07-15
Debian	DSA-746-1	phpgroupware	2005-07-13
Slackware	SSA:2005-192-02	php	2005-07-12
Slackware	SSA:2005-192-01	php	2005-07-12
Gentoo	200507-08	phpgroupware	2005-07-10
Debian	DSA-747-1	egroupware	2005-07-10
Gentoo	200507-07	phpwebsite	2005-07-10
Debian	DSA-745-1	drupal	2005-07-10
SuSE	SUSE-SA:2005:041	php/pear	2005-07-08
Red Hat	RHSA-2005:564-01	PHP	2005-07-07
Gentoo	200507-06	tikiwiki	2005-07-06
Ubuntu	USN-147-2	USN-147-1 [1] fixed a remote code execution	2005-07-06
Ubuntu	USN-147-1	php4, php4-universe	2005-07-05
Fedora	FEDORA-2005-518	php	2005-07-05
Fedora	FEDORA-2005-517	php	2005-07-05
Gentoo	200507-01	PEAR-XML_RPC	2005-07-03
Mandriva	MDKSA-2005:109	php-pear	2005-06-30