SuSE 11.1 Security Update : PHP5 (SAT Patch Number 6252)
High Nessus Plugin ID 64099
The remote SuSE 11 host is missing one or more security updates.
This update fixes several security issues in PHP5 : - A directory traversal bug has been fixed in PHP5. (CVE-2012-1172) - A command injection was possible when PHP5 was operated in CGI mode using commandline options. This problem does not affect PHP5 in the normal apache module mode setup. (CVE-2012-1823 / CVE-2012-2311) - Also a pack/unpacking bug on big endian 64bit architectures (ppc64 and s390x) has been fixed. (bnc#753778)