Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

A cross-site scripting (XSS) flaw was found in the 'apc.php' script, which provides a detailed analysis of the internal workings of APC and is shipped as part of the APC extension documentation. A remote attacker could possibly use this flaw to conduct a cross-site scripting attack. (CVE-2010-3294)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0811 advisory.

    [3.1.9-2]
    - remove -devel package ISA multilib dependencies

    [3.1.9-1]
    - update to 3.1.9 (bugfix, stable) (#662655)
    - create -devel subpackage with header files
    - ship apc.php for easier referral in the config files

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The php-pecl-apc packages contain APC (Alternative PHP Cache), the framework for caching and optimization of intermediate PHP code.

A cross-site scripting (XSS) flaw was found in the 'apc.php' script, which provides a detailed analysis of the internal workings of APC and is shipped as part of the APC extension documentation. A remote attacker could possibly use this flaw to conduct a cross-site scripting attack. (CVE-2010-3294)

Note: The administrative script is not deployed upon package installation. It must manually be copied to the web root (the default is '/var/www/html/', for example).

In addition, the php-pecl-apc packages have been upgraded to upstream version 3.1.9, which provides a number of bug fixes and enhancements over the previous version.

All users of php-pecl-apc are advised to upgrade to these updated packages, which fix these issues and add these enhancements. If the 'apc.php' script was previously deployed in the web root, it must manually be re-deployed to replace the vulnerable version to resolve this issue.

Updated php-pecl-apc packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The php-pecl-apc packages contain APC (Alternative PHP Cache), the framework for caching and optimization of intermediate PHP code.

A cross-site scripting (XSS) flaw was found in the 'apc.php' script, which provides a detailed analysis of the internal workings of APC and is shipped as part of the APC extension documentation. A remote attacker could possibly use this flaw to conduct a cross-site scripting attack. (CVE-2010-3294)

Note: The administrative script is not deployed upon package installation. It must manually be copied to the web root (the default is '/var/www/html/', for example).

In addition, the php-pecl-apc packages have been upgraded to upstream version 3.1.9, which provides a number of bug fixes and enhancements over the previous version. (BZ#662655)

All users of php-pecl-apc are advised to upgrade to these updated packages, which fix these issues and add these enhancements. If the 'apc.php' script was previously deployed in the web root, it must manually be re-deployed to replace the vulnerable version to resolve this issue.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0811 advisory.

  - php-pecl-apc: potential XSS in apc.php (CVE-2010-3294)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Upstream Changelog for Version 3.1.4 - API 3.1.0 (beta)

  - Renamed the memory protection configure option to
    --enable-apc-memprotect (Kalle, Shire)

    - ZTS fixes and optimizations (Kalle, Felipe)

    - Added support for interned strings, run-time caches       and Zend Engine 2.4 (Dmitry)

    - Added apc_exists() (Rasmus)

    - Fixed potential XSS in apc.php (Pierre, Matt Chapman)

    - Fixed pecl bug #17597 (keys with embedded NUL) (Gopal)

    - Fixed pecl bug #17650 (Fix goto jump offsets) (Gopal)

    - Fixed pecl bug #17527 (Standardized error reporting)       (Gopal, Paul Dragoonis)

    - Fixed pecl bug #17089 (Scrub the constant table of all       inherited members before caching) (Gopal)

    - Fixed pecl bug #16860 (files can be included more than       once even when include/require_once are used) (Pierre)

    - Fixed pecl bug #16717 (apc_fetch dies after 1 hour,       regardless of ttl settings) (Kalle)

    - Fixed pecl bug #17597 (apc user cache keys with       embedded NULs) (Gopal)

    - Fixed pecl bug #13583 (apc upload progress fixes)       (Gopal)

Improves default configuration file provided.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
69703	Amazon Linux AMI : php-pecl-apc (ALAS-2012-96)	Nessus	Amazon Linux Local Security Checks	medium
68551	Oracle Linux 6 : php-pecl-apc (ELSA-2012-0811)	Nessus	Oracle Linux Local Security Checks	medium
61346	Scientific Linux Security Update : php-pecl-apc on SL6.x i386/x86_64 (20120620)	Nessus	Scientific Linux Local Security Checks	medium
59922	CentOS 6 : php-pecl-apc (CESA-2012:0811)	Nessus	CentOS Local Security Checks	medium
59587	RHEL 6 : php-pecl-apc (RHSA-2012:0811)	Nessus	Red Hat Local Security Checks	medium
49722	Fedora 12 : php-pecl-apc-3.1.4-2.fc12 (2010-15004)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2010-3294

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium