PHP was updated to version 5.3.3 to fix serveral security issues.

(CVE-2010-0397, CVE-2010-1860, CVE-2010-1862, CVE-2010-1864, CVE-2010-1866, CVE-2010-1914, CVE-2010-1915, CVE-2010-1917, CVE-2010-2093, CVE-2010-2094, CVE-2010-2097, CVE-2010-2100, CVE-2010-2101, CVE-2010-2190, CVE-2010-2191, CVE-2010-2225, CVE-2010-2531, CVE-2010-2950, CVE-2010-3062, CVE-2010-3063, CVE-2010-3064, CVE-2010-3065)

According to the web server's banner, the version of HP System Management Homepage (SMH) hosted on the remote host is earlier than 6.3.  Such versions are reportedly affected by the following vulnerabilities :

  - An error exists in the function 'fnmatch' in the     bundled version of PHP that can lead to stack     exhaustion. (CVE-2010-1917)

  - An information disclosure vulnerability exists in the     'var_export' function in the bundled version of PHP     that can be triggered when handling certain error     conditions. (CVE-2010-2531)

  - A double free vulnerability in the     'ssl3_get_key_exchange()' function in the third-party     OpenSSL library could be abused to crash the     application. (CVE-2010-2939)

  - A format string vulnerability in the phar extension     in the bundled version of PHP could lead to the     disclosure of memory contents and possibly allow     execution of arbitrary code via a specially crafted     'phar://' URI. (CVE-2010-2950)

  - A NULL pointer dereference in     'ZipArchive::getArchiveComment' included with the     bundled version of PHP can be abused to crash the     application. (CVE-2010-3709)

  - The bundled version of libxml2 may read from invalid     memory locations when processing malformed XPath     expressions, resulting in an application crash.
    (CVE-2010-4008)

  - An error in the 'mb_strcut()' function in the bundled     version of PHP can be exploited by passing a large     'length' parameter to disclose potentially sensitive     information from the heap. (CVE-2010-4156)

  - An as-yet unspecified remote code execution     vulnerability could allow an authenticated user to     execute arbitrary code with system privileges.
    (CVE-2011-1540)

  - An as-yet unspecified, unauthorized access vulnerability     could lead to a complete system compromise.
    (CVE-2011-1541)

Update to PHP 5.3.3 Security Enhancements and Fixes in PHP 5.3.3: * Rewrote var_export() to use smart_str rather than output buffering, prevents data disclosure if a fatal error occurs (CVE-2010-2531). * Fixed a possible resource destruction issues in shm_put_var(). * Fixed a possible information leak because of interruption of XOR operator. * Fixed a possible memory corruption because of unexpected call-time pass by refernce and following memory clobbering through callbacks. * Fixed a possible memory corruption in ArrayObject::uasort(). * Fixed a possible memory corruption in parse_str(). * Fixed a possible memory corruption in pack(). * Fixed a possible memory corruption in substr_replace(). * Fixed a possible memory corruption in addcslashes(). * Fixed a possible stack exhaustion inside fnmatch(). * Fixed a possible dechunking filter buffer overflow. * Fixed a possible arbitrary memory access inside sqlite extension. * Fixed string format validation inside phar extension. * Fixed handling of session variable serialization on certain prefix characters. * Fixed a NULL pointer dereference when processing invalid XML-RPC requests (Fixes CVE-2010-0397, bug #51288). * Fixed SplObjectStorage unserialization problems (CVE-2010-2225). * Fixed possible buffer overflows in mysqlnd_list_fields, mysqlnd_change_user. * Fixed possible buffer overflows when handling error packets in mysqlnd. Full upstream Changelog: http://www.php.net/ChangeLog-5.php#5.3.3

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
49210	openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2010:0599-1)	Nessus	SuSE Local Security Checks	2010/9/13	2021/1/14	high
53532	HP System Management Homepage < 6.3 Multiple Vulnerabilities	Nessus	Web Servers	2011/4/22	2022/4/11	critical
75429	openSUSE Security Update : apache2-mod_php5 (openSUSE-SU-2010:0599-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	high
48412	Fedora 13 : maniadrive-1.2-22.fc13 / php-5.3.3-1.fc13 / php-eaccelerator-0.9.6.1-2.fc13 (2010-11481)	Nessus	Fedora Local Security Checks	2010/8/24	2021/1/11	high

偵測

搜尋 Plugin

high

critical

high

high