RHEL 2.1 : php (RHSA-2006:0682)

This script is Copyright (C) 2006-2014 Tenable Network Security, Inc.


Synopsis :

The remote Red Hat host is missing one or more security updates.

Description :

Updated PHP packages that fix multiple security issues are now
available for Red Hat Enterprise Linux 2.1.

This update has been rated as having moderate security impact by the
Red Hat Security Response Team.

PHP is an HTML-embedded scripting language commonly used with the
Apache HTTP Web server.

A response-splitting issue was discovered in the PHP session handling.
If a remote attacker can force a carefully crafted session identifier
to be used, a cross-site-scripting or response-splitting attack could
be possible. (CVE-2006-3016)

A buffer overflow was discovered found in the PHP sscanf() function.
If a script used the sscanf() function with positional arguments in
the format string, a remote attacker sending a carefully crafted
request could execute arbitrary code as the 'apache' user.
(CVE-2006-4020)

An integer overflow was discovered in the PHP wordwrap() and
str_repeat() functions. If a script running on a 64-bit server used
either of these functions on untrusted user data, a remote attacker
sending a carefully crafted request might be able to cause a heap
overflow. (CVE-2006-4482)

An integer overflow was discovered in the PHP memory allocation
handling. On 64-bit platforms, the 'memory_limit' setting was not
enforced correctly, which could allow a denial of service attack by a
remote user. (CVE-2006-4486)

Users of PHP should upgrade to these updated packages which contain
backported patches to correct these issues. These packages also
contain a fix for a bug where certain input strings to the metaphone()
function could cause memory corruption.

See also :

https://www.redhat.com/security/data/cve/CVE-2006-3016.html
https://www.redhat.com/security/data/cve/CVE-2006-4020.html
https://www.redhat.com/security/data/cve/CVE-2006-4482.html
https://www.redhat.com/security/data/cve/CVE-2006-4486.html
http://rhn.redhat.com/errata/RHSA-2006-0682.html

Solution :

Update the affected packages.

Risk factor :

High / CVSS Base Score : 9.3
(CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C)

Family: Red Hat Local Security Checks

Nessus Plugin ID: 22444 ()

Bugtraq ID:

CVE ID: CVE-2006-3016
CVE-2006-4020
CVE-2006-4482
CVE-2006-4486