Detections
Analytics
RHEL 2.1 : php (RHSA-2007:0154)
medium Nessus Plugin ID 25067
Synopsis
The remote Red Hat host is missing one or more security updates.Description
Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1.This update has been rated as having important security impact by the Red Hat Security Response Team.
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server.
A denial of service flaw was found in the way PHP processed a deeply nested array. A remote attacker could cause the PHP interpreter to crash by submitting an input variable with a deeply nested array.
(CVE-2007-1285)
A flaw was found in the way PHP's unserialize() function processes data. If a remote attacker is able to pass arbitrary data to PHP's unserialize() function, it may be possible for them to execute arbitrary code as the apache user. (CVE-2007-1286)
A double free flaw was found in PHP's session_decode() function. If a remote attacker is able to pass arbitrary data to PHP's session_decode() function, it may be possible for them to execute arbitrary code as the apache user. (CVE-2007-1711)
Users of PHP should upgrade to these updated packages which contain backported patches to correct these issues.
Solution
Update the affected packages.See Also
https://access.redhat.com/security/cve/cve-2007-1285
https://access.redhat.com/security/cve/cve-2007-1286
Plugin Details
Severity: Medium
ID: 25067
File Name: redhat-RHSA-2007-0154.nasl
Version: 1.26
Type: local
Agent: unix
Family: Red Hat Local Security Checks
Published: 4/19/2007
Updated: 1/14/2021
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.3
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.6
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: p-cpe:/a:redhat:enterprise_linux:php-devel, p-cpe:/a:redhat:enterprise_linux:php-ldap, p-cpe:/a:redhat:enterprise_linux:php-manual, p-cpe:/a:redhat:enterprise_linux:php, p-cpe:/a:redhat:enterprise_linux:php-imap, p-cpe:/a:redhat:enterprise_linux:php-mysql, p-cpe:/a:redhat:enterprise_linux:php-odbc, cpe:/o:redhat:enterprise_linux:2.1, p-cpe:/a:redhat:enterprise_linux:php-pgsql
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 4/16/2007
Vulnerability Publication Date: 3/6/2007
Exploitable With
Metasploit (PHP 4 unserialize() ZVAL Reference Counter Overflow (Cookie))
Reference Information
CVE: CVE-2007-1285, CVE-2007-1286, CVE-2007-1711
RHSA: 2007:0154