php5: several vulnerabilities
| Package(s): | php5 | CVE #(s): | CVE-2008-3658 CVE-2008-3659 CVE-2008-3660 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Created: | October 7, 2008 | Updated: | June 1, 2009 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Description: | From the Debian advisory:
Several vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-3658: Buffer overflow in the imageloadfont function allows a denial of service or code execution through a crafted font file. CVE-2008-3659: Buffer overflow in the memnstr function allows a denial of service or code execution via a crafted delimiter parameter to the explode function. CVE-2008-3660: Denial of service is possible in the FastCGI module by a remote attacker by making a request with multiple dots before the extension. | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||