Detections
Analytics
Fedora 15 : maniadrive-1.2-29.fc15 / php-5.3.6-1.fc15 / php-eaccelerator-0.9.6.1-6.fc15 (2011-3614)
high Nessus Plugin ID 52983
Language:
Synopsis
The remote Fedora host is missing one or more security updates.Description
Security Enhancements and Fixes in PHP 5.3.6 :- Enforce security in the fastcgi protocol parsing with fpm SAPI.
- Fixed bug #54247 (format-string vulnerability on Phar). (CVE-2011-1153)
- Fixed bug #54193 (Integer overflow in shmop_read()).
(CVE-2011-1092)
- Fixed bug #54055 (buffer overrun with high values for precision ini setting).
- Fixed bug #54002 (crash on crafted tag in exif).
(CVE-2011-0708)
- Fixed bug #53885 (ZipArchive segfault with FL_UNCHANGED on empty archive). (CVE-2011-0421)
Full upstream changelog : http://php.net/ChangeLog-5.php#5.3.6
Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
Solution
Update the affected maniadrive, php and / or php-eaccelerator packages.See Also
http://php.net/ChangeLog-5.php#5.3.6
https://bugzilla.redhat.com/show_bug.cgi?id=680972
https://bugzilla.redhat.com/show_bug.cgi?id=688378
https://bugzilla.redhat.com/show_bug.cgi?id=688735
http://www.nessus.org/u?db15ff24
Plugin Details
Severity: High
ID: 52983
File Name: fedora_2011-3614.nasl
Version: 1.13
Type: local
Agent: unix
Family: Fedora Local Security Checks
Published: 3/27/2011
Updated: 1/11/2021
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: p-cpe:/a:fedoraproject:fedora:maniadrive, p-cpe:/a:fedoraproject:fedora:php, cpe:/o:fedoraproject:fedora:15, p-cpe:/a:fedoraproject:fedora:php-eaccelerator
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 3/19/2011
Reference Information
CVE: CVE-2011-0421, CVE-2011-0708, CVE-2011-1153
FEDORA: 2011-3614