リモート BIG-IP デバイスに、セキュリティアドバイザリで要求されたパッチがありません。

Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1.

This update has been rated as having important security impact by the Red Hat Security Response Team.

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server.

A denial of service flaw was found in the way PHP processed a deeply nested array. A remote attacker could cause the PHP interpreter to crash by submitting an input variable with a deeply nested array.
(CVE-2007-1285)

A flaw was found in the way PHP's unserialize() function processes data. If a remote attacker is able to pass arbitrary data to PHP's unserialize() function, it may be possible for them to execute arbitrary code as the apache user. (CVE-2007-1286)

A double free flaw was found in PHP's session_decode() function. If a remote attacker is able to pass arbitrary data to PHP's session_decode() function, it may be possible for them to execute arbitrary code as the apache user. (CVE-2007-1711)

Users of PHP should upgrade to these updated packages which contain backported patches to correct these issues.

Several remote vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2007-1286     Stefan Esser discovered an overflow in the object     reference handling code of the unserialize() function,     which allows the execution of arbitrary code if     malformed input is passed from an application.

  - CVE-2007-1380     Stefan Esser discovered that the session handler     performs insufficient validation of variable name length     values, which allows information disclosure through a     heap information leak.

  - CVE-2007-1521     Stefan Esser discovered a double free vulnerability in     the session_regenerate_id() function, which allows the     execution of arbitrary code.

  - CVE-2007-1711     Stefan Esser discovered a double free vulnerability in     the session management code, which allows the execution     of arbitrary code.

  - CVE-2007-1718     Stefan Esser discovered that the mail() function     performs insufficient validation of folded mail headers,     which allows mail header injection.

  - CVE-2007-1777     Stefan Esser discovered that the extension to handle ZIP     archives performs insufficient length checks, which     allows the execution of arbitrary code.

Red Hat セキュリティアドバイザリ 2007:0155 から：

いくつかのセキュリティ問題を修正する更新済みの PHP パッケージが、Red Hat Enterprise Linux 3 および 4 で現在利用可能です。

Red Hat セキュリティレスポンスチームは、この更新に重大なセキュリティインパクトがあると評価しています。

PHP は、Apache HTTP Web サーバーで一般的に使用される、 HTML を組み込んだスクリプト言語です。

PHP が深くネスト化した配列を処理する方法で、サービス拒否の欠陥が見つかりました。リモートの攻撃者は、深くネスト化した配列と入力変数を送信することっで、 PHP インタープリターをクラッシュさせることが可能です。
(CVE-2007-1285)

PHP の unserialize () 関数がデータを処理する方法で、欠陥が見つかりました。もしリモートの攻撃者が PHP の unserialize() 関数に任意のデータを渡すことができる場合、apache ユーザーとして任意のコードを実行できる可能性があります。(CVE-2007-1286)

mbstring 拡張がグローバル変数を設定する方法で、欠陥が見つかりました。グローバル変数を設定する mb_parse_str() 関数に使用されるスクリプトが、register_globals 構成オプションを強制的に有効にして、グローバル変数のインジェクションを引きこす可能性があります。
(CVE-2007-1583)

PHP の session_decode() 関数で二重解放の欠陥が見つかりました。もしリモートの攻撃者が PHP の session_decode() 関数に任意のデータを渡すことができる場合、apache ユーザーとして任意のコードを実行できる可能性があります。(CVE-2007-1711)

PHP の mail () 関数がヘッダーデータを処理する方法で、欠陥が発見されました。もしスクリプトが信頼されていないソースからの文字列を含む Subject ヘッダーを使用するメールを送信した場合、リモートの攻撃者はバルクメールを意図されていない受信者へ送る可能性があります。(CVE-2007-1718)

ヒープベースのバッファオーバーフローの欠陥が PHP の gd 拡張機能で見つかりました。信頼されていないソースからの WBMP 画像を強制的に処理することができるスクリプトにより、任意のコード実行が引き起こされる可能性があります。
(CVE-2007-1001)

PHP の gd 拡張にバッファオーバーリードの欠陥が発見されました。信頼されていないソースからの JIS フォント を使用し、任意の文字列の書き込みを強制することができるスクリプトにより、PHP インタープリターはクラッシュする可能性があります。
(CVE-2007-0455)

PHP のユーザーは、バックポートされたパッチが含まれるこれらの更新済みパッケージへアップグレードし、これらの問題を修正する必要があります。

Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server.

A denial of service flaw was found in the way PHP processed a deeply nested array. A remote attacker could cause the PHP interpreter to crash by submitting an input variable with a deeply nested array.
(CVE-2007-1285)

A flaw was found in the way PHP's unserialize() function processed data. If a remote attacker was able to pass arbitrary data to PHP's unserialize() function, they could possibly execute arbitrary code as the apache user. (CVE-2007-1286)

A flaw was found in the way the mbstring extension set global variables. A script which used the mb_parse_str() function to set global variables could be forced to enable the register_globals configuration option, possibly resulting in global variable injection.
(CVE-2007-1583)

A double free flaw was found in PHP's session_decode() function. If a remote attacker was able to pass arbitrary data to PHP's session_decode() function, they could possibly execute arbitrary code as the apache user. (CVE-2007-1711)

A flaw was discovered in the way PHP's mail() function processed header data. If a script sent mail using a Subject header containing a string from an untrusted source, a remote attacker could send bulk e-mail to unintended recipients. (CVE-2007-1718)

A heap based buffer overflow flaw was discovered in PHP's gd extension. A script that could be forced to process WBMP images from an untrusted source could result in arbitrary code execution.
(CVE-2007-1001)

A buffer over-read flaw was discovered in PHP's gd extension. A script that could be forced to write arbitrary string using a JIS font from an untrusted source could cause the PHP interpreter to crash.
(CVE-2007-0455)

Users of PHP should upgrade to these updated packages which contain backported patches to correct these issues.

The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. 

This update contains several security fixes for the following programs :

 - bzip2
 - CFNetwork
 - CoreAudio
 - cscope
 - gnuzip
 - iChat
 - Kerberos
 - mDNSResponder
 - PDFKit
 - PHP
 - Quartz Composer
 - Samba
 - SquirrelMail
 - Tomcat
 - WebCore
 - WebKit

From Red Hat Security Advisory 2007:0155 :

Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4.

This update has been rated as having important security impact by the Red Hat Security Response Team.

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server.

A denial of service flaw was found in the way PHP processed a deeply nested array. A remote attacker could cause the PHP interpreter to crash by submitting an input variable with a deeply nested array.
(CVE-2007-1285)

A flaw was found in the way PHP's unserialize() function processed data. If a remote attacker was able to pass arbitrary data to PHP's unserialize() function, they could possibly execute arbitrary code as the apache user. (CVE-2007-1286)

A flaw was found in the way the mbstring extension set global variables. A script which used the mb_parse_str() function to set global variables could be forced to enable the register_globals configuration option, possibly resulting in global variable injection.
(CVE-2007-1583)

A double free flaw was found in PHP's session_decode() function. If a remote attacker was able to pass arbitrary data to PHP's session_decode() function, they could possibly execute arbitrary code as the apache user. (CVE-2007-1711)

A flaw was discovered in the way PHP's mail() function processed header data. If a script sent mail using a Subject header containing a string from an untrusted source, a remote attacker could send bulk e-mail to unintended recipients. (CVE-2007-1718)

A heap based buffer overflow flaw was discovered in PHP's gd extension. A script that could be forced to process WBMP images from an untrusted source could result in arbitrary code execution.
(CVE-2007-1001)

A buffer over-read flaw was discovered in PHP's gd extension. A script that could be forced to write arbitrary string using a JIS font from an untrusted source could cause the PHP interpreter to crash.
(CVE-2007-0455)

Users of PHP should upgrade to these updated packages which contain backported patches to correct these issues.

远程 BIG-IP 设备缺少安全公告所需的修补程序。

来自 Red Hat 安全公告 2007:0155：

更新后的 PHP 程序包修复了多个安全问题，现在可用于 Red Hat Enterprise Linux 3 和 4。

Red Hat 安全响应团队将此更新评级为具有重要安全影响。

PHP 是一种嵌入了 HTML 的脚本语言，通常用于 Apache HTTP Web 服务器。

在 PHP 处理深度嵌套数组的方式中发现一个拒绝服务缺陷。远程攻击者可通过提交具有深度嵌套数组的输入变量造成 PHP 解释器崩溃。
(CVE-2007-1285)

在 PHP 的 unserialize() 函数处理数据的方式中发现一个缺陷。如果远程攻击者能够将任意数据传递到 PHP 的 unserialize() 函数，他们便可能以 apache 用户的身份执行任意代码。(CVE-2007-1286)

在 mbstring 扩展设置全局变量的方式中发现一个缺陷。可强制使用 mb_parse_str() 函数设置全局变量的脚本启用 register_globals 配置选项，从而可能导致全局变量注入。
(CVE-2007-1583)

在 PHP 的 session_decode() 函数中发现一个双重释放缺陷。如果远程攻击者能够将任意数据传递到 PHP 的 session_decode() 函数，他们便可能以 apache 用户的身份执行任意代码。(CVE-2007-1711)

在 PHP 的 mail() 函数处理标头数据的方式中发现一个缺陷。如果脚本发送使用包含来自不受信任来源的字符串的主题标头的邮件，远程攻击者可向非预期收件人发送批量电子邮件。(CVE-2007-1718)

在 PHP 的 gd 扩展中发现一个基于堆的缓冲区溢出缺陷。可强制用于处理来自不受信任来源的 WBMP 图像的脚本可导致任意代码执行。
(CVE-2007-1001)

在 PHP 的 gd 扩展中发现一个缓冲区读取越界缺陷。可强制用于使用来自不受信任来源的 JIS 字体编写任意字符串的脚本可导致 PHP 解释器崩溃。
(CVE-2007-0455)

PHP 用户应升级这些更新后的程序包，其中包含用于修正这些问题的向后移植的修补程序。

遠端 BIG-IP 裝置遺漏安全性公告所要求的修補程式。

來自 Red Hat 安全性公告 2007:0155：

現已提供適用於 Red Hat Enterprise Linux 3 和 4 的更新版 PHP 套件，可修正數個安全性問題。

Red Hat 安全性回應團隊已將此更新評等為具有重要安全性影響。

PHP 是一種內嵌 HTML 的指令碼語言，通常用於 Apache HTTP Web 伺服器。

在 PHP 處理深層巢狀陣列的方式中，發現一個拒絕服務瑕疵。遠端攻擊者可使用深層巢狀陣列提交輸入變數，進而造成 PHP 解譯器損毀。
(CVE-2007-1285)

在 PHP 的 unserialize() 函式處理資料的方式中發現一個瑕疵。如果遠端攻擊者能將任意資料傳送至 PHP 的 unserialize() 函式，便可能以 apache 使用者的身分執行任意程式碼。(CVE-2007-1286)

在 mbstring 延伸模組設定全域變數的方式中發現一個瑕疵。以 mb_parse_str() 函式設定全域變數的指令碼可遭到強制啟用 register_globals 組態選項，進而可能導致全域變數插入。
(CVE-2007-1583)

在 PHP 的 session_decode() 函式中發現一個重複釋放瑕疵。如果遠端攻擊者能將任意資料傳送至 PHP 的 session_decode() 函式，便可能以 apache 使用者的身分執行任意程式碼。(CVE-2007-1711)

在 PHP 的 mail() 函式處理標頭資料的方式中發現一個瑕疵。如果指令碼傳送郵件時，其所用之主旨標頭含有來自未受信任來源的字串，則遠端攻擊者可傳送大量電子郵件至未預定的收件者。(CVE-2007-1718)

在 PHP 的 gd 延伸模組中發現一個堆積型緩衝區溢位瑕疵。若指令碼遭強制處理來自未受信任來源的 WBMP 影像，則可導致任意程式碼執行。
(CVE-2007-1001)

在 PHP 的 gd 延伸模組中發現一個緩衝區過度讀取瑕疵。若指令碼遭強制寫入來自未受信任來源的 JIS 字型任意字串，則可造成 PHP 解譯器損毀。
(CVE-2007-0455)

PHP 使用者應升級至這些更新版套件，其中包含可更正這些問題的反向移植修補程式。

Several remote vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2007-1286     Stefan Esser discovered an overflow in the object     reference handling code of the unserialize() function,     which allows the execution of arbitrary code if     malformed input is passed from an application.

  - CVE-2007-1375     Stefan Esser discovered that an integer overflow in the     substr_compare() function allows information disclosure     of heap memory.

  - CVE-2007-1376     Stefan Esser discovered that insufficient validation of     shared memory functions allows the disclosure of heap     memory.

  - CVE-2007-1380     Stefan Esser discovered that the session handler     performs insufficient validation of variable name length     values, which allows information disclosure through a     heap information leak.

  - CVE-2007-1453     Stefan Esser discovered that the filtering framework     performs insufficient input validation, which allows the     execution of arbitrary code through a buffer underflow.

  - CVE-2007-1454     Stefan Esser discovered that the filtering framework can     be bypassed with a special whitespace character.

  - CVE-2007-1521     Stefan Esser discovered a double free vulnerability in     the session_regenerate_id() function, which allows the     execution of arbitrary code.

  - CVE-2007-1583     Stefan Esser discovered that a programming error in the     mb_parse_str() function allows the activation of     'register_globals'.

  - CVE-2007-1700     Stefan Esser discovered that the session extension     incorrectly maintains the reference count of session     variables, which allows the execution of arbitrary code.

  - CVE-2007-1711     Stefan Esser discovered a double free vulnerability in     the session management code, which allows the execution     of arbitrary code.

  - CVE-2007-1718     Stefan Esser discovered that the mail() function     performs insufficient validation of folded mail headers,     which allows mail header injection.

  - CVE-2007-1777     Stefan Esser discovered that the extension to handle ZIP     archives performs insufficient length checks, which     allows the execution of arbitrary code.

  - CVE-2007-1824     Stefan Esser discovered an off-by-one error in the     filtering framework, which allows the execution of     arbitrary code.

  - CVE-2007-1887     Stefan Esser discovered that a buffer overflow in the     sqlite extension allows the execution of arbitrary code.

  - CVE-2007-1889     Stefan Esser discovered that the PHP memory manager     performs an incorrect type cast, which allows the     execution of arbitrary code through buffer overflows.

  - CVE-2007-1900     Stefan Esser discovered that incorrect validation in the     email filter extension allows the injection of mail     headers.

The oldstable distribution (sarge) doesn't include php5.

The remote host is affected by the vulnerability described in GLSA-200705-19 (PHP: Multiple vulnerabilities)

    Several vulnerabilities were found in PHP, most of them during the     Month Of PHP Bugs (MOPB) by Stefan Esser. The most severe of these     vulnerabilities are integer overflows in wbmp.c from the GD library     (CVE-2007-1001) and in the substr_compare() PHP 5 function     (CVE-2007-1375). Ilia Alshanetsky also reported a buffer overflow in     the make_http_soap_request() and in the user_filter_factory_create()     functions (CVE-2007-2510, CVE-2007-2511), and Stanislav Malyshev     discovered another buffer overflow in the bundled XMLRPC library     (CVE-2007-1864). Additionally, the session_regenerate_id() and the     array_user_key_compare() functions contain a double-free vulnerability     (CVE-2007-1484, CVE-2007-1521). Finally, there exist implementation     errors in the Zend engine, in the mb_parse_str(), the unserialize() and     the mail() functions and other elements.
  Impact :

    Remote attackers might be able to exploit these issues in PHP     applications making use of the affected functions, potentially     resulting in the execution of arbitrary code, Denial of Service,     execution of scripted contents in the context of the affected site,     security bypass or information leak.
  Workaround :

    There is no known workaround at this time.

The remote BIG-IP device is missing a patch required by a security advisory.

ID	名稱	產品	系列	已發布	已更新	嚴重性
78215	F5 Networks BIG-IP：複数の PHP 脆弱性（SOL7859）	Nessus	F5 Networks Local Security Checks	2014/10/10	2021/1/11	high
25067	RHEL 2.1 : php (RHSA-2007:0154)	Nessus	Red Hat Local Security Checks	2007/4/19	2021/1/14	medium
25099	Debian DSA-1282-1 : php4 - several vulnerabilities	Nessus	Debian Local Security Checks	2007/4/30	2021/1/4	high
67471	Oracle Linux 3/4：php（ELSA-2007-0155）	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
25043	CentOS 3 / 4 : php (CESA-2007:0155)	Nessus	CentOS Local Security Checks	2007/4/19	2021/1/4	high
25830	Mac OS X Multiple Vulnerabilities (Security Update 2007-007)	Nessus	MacOS X Local Security Checks	2007/8/2	2024/5/28	critical
25068	RHEL 3 / 4 : php (RHSA-2007:0155)	Nessus	Red Hat Local Security Checks	2007/4/19	2021/1/14	high
67471	Oracle Linux 3 / 4 : php (ELSA-2007-0155)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
78215	F5 Networks BIG-IP：多种 PHP 漏洞 (SOL7859)	Nessus	F5 Networks Local Security Checks	2014/10/10	2021/1/11	high
67471	Oracle Linux 3 / 4：php (ELSA-2007-0155)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
78215	F5 Networks BIG-IP：多個 PHP 弱點 (SOL7859)	Nessus	F5 Networks Local Security Checks	2014/10/10	2021/1/11	high
67471	Oracle Linux 3 / 4 : php (ELSA-2007-0155)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
25100	Debian DSA-1283-1 : php5 - several vulnerabilities	Nessus	Debian Local Security Checks	2007/4/30	2021/1/4	high
25340	GLSA-200705-19 : PHP: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2007/5/29	2021/1/6	high
78215	F5 Networks BIG-IP : Multiple PHP vulnerabilities (SOL7859)	Nessus	F5 Networks Local Security Checks	2014/10/10	2021/1/11	high

偵測

搜尋 Plugin

high

medium

high

high

high

critical

high

high

high

high

high

high

high

high

high