php: multiple vulnerabilities

Package(s):

php

CVE #(s):

CVE-2005-3390 CVE-2005-3389 CVE-2005-3388 CVE-2005-3353

Created:

November 8, 2005

Updated:

December 23, 2005

Description:

There are multiple vulnerabilities in PHP, including malicious requests may overwrite the GLOBALS array, the parse_str() function may enable the register_globals setting, cross-site scripting bugs in phpinfo() and a bug in EXIF image parsing that may crash the process.

Alerts:

Ubuntu	USN-232-1	php4, php5	2005-12-23
SuSE	SUSE-SA:2005:069	php4,php5	2005-12-14
SuSE	SUSE-SR:2005:029	multi	2005-12-09
OpenPKG	OpenPKG-SA-2005.027	php	2005-12-03
Fedora-Legacy	FLSA:166943	php	2005-11-28
Mandriva	MDKSA-2005:213	php	2005-11-16
Gentoo	200511-08	php	2005-11-13
Red Hat	RHSA-2005:838-01	PHP	2005-11-10
Red Hat	RHSA-2005:831-01	PHP	2005-11-10
Fedora	FEDORA-2005-1061	php	2005-11-08
Fedora	FEDORA-2005-1062	php	2005-11-08

(Log in to post comments)