Multiple Vulnerabilities in PHP fileupload

From: Oliver Rompcik (rompcik@informatik.uni-bonn.de)
Date: 02/28/02 

From: Oliver Rompcik <rompcik@informatik.uni-bonn.de>
To: freebsd-security@FreeBSD.ORG
Date: Thu, 28 Feb 2002 15:55:49 +0100

CERT reported several vulnerabilities in all PHP Versions <= 4.1.1.
See advisory at http://www.cert.org/advisories/CA-2002-05.html

Fixed version of PHP 4.1.2 is available at http://www.php.net.
Until fixed FreeBSD binary package is available, users should build 4.1.2
from source.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • RE: php pack() security update
    ... I'm waiting for redhat to release updates for php on as3. ... SECUNIA ADVISORY ID: ... Multiple vulnerabilities have been reported in PHP, ... Successful exploitation requires that PHP runs on a multi-threaded ...
    (RedHat)
  • php pack() security update
    ... I'm waiting for redhat to release updates for php on as3. ... SECUNIA ADVISORY ID: ... Multiple vulnerabilities have been reported in PHP, ... Successful exploitation requires that PHP runs on a multi-threaded ...
    (RedHat)
  • Re: Multiple Vulnerabilities in PHP fileupload
    ... > CERT reported several vulnerabilities in all PHP Versions <= 4.1.1. ... > See advisory at http://www.cert.org/advisories/CA-2002-05.html ... > Until fixed FreeBSD binary package is available, ...
    (FreeBSD-Security)
  • [NEWS] Vulnerability Issues in Implementations of the H.323 Protocol (Generic)
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Get your security news from a reliable source. ... discovered a number of implementation specific vulnerabilities in the ... The severity of these vulnerabilities varies by vendor. ...
    (Securiteam)
  • iDEFENSE Security Advisory 03.31.05: PHP getimagesize() Multiple Denial of Service Vulnerabilities
    ... PHP getimagesize() Multiple Denial of Service Vulnerabilities ... iDEFENSE has confirmed the existence of these vulnerabilities in PHP ...
    (Bugtraq)