• Все разделы
  • Статьи
  • Медиа
  • Новости
  • Нормативные материалы
  • Конференции
  • Глоссарий

Уведомление безопасности SUSE-SA:2006:059

Главная Специалистам База уязвимостей Уведомление безопасности SUSE-SA:2006:059

Карточка уязвимости

Характеристики уязвимости

Уровень опасности
Оценка CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Производитель ПО
Наименование ПО
apache2-mod_php4 (any) apache2-mod_php5 (any) mod_php4-servlet (any) php4 (any) php4-32bit (any) php4-curl (any) php4-devel (any) php4-exif (any) php4-fastcgi (any) php4-gd (any) php4-imap (any) php4-mbstring (any) php4-pear (any) php4-pgsql (any) php4-servlet (any) php4-session (any) php4-sysvshm (any) php4-unixODBC (any) php4-wddx (any) php5 (any) php5-bcmath (any) php5-curl (any) php5-dba (any) php5-devel (any) php5-dom (any) php5-exif (any) php5-fastcgi (any) php5-ftp (any) php5-gd (any) php5-iconv (any) php5-imap (any) php5-ldap (any) php5-mbstring (any) php5-mysql (any) php5-mysqli (any) php5-pdo (any) php5-pear (any) php5-pgsql (any) php5-soap (any) php5-sysvmsg (any) php5-sysvshm (any) php5-wddx (any) php5-xmlrpc (any)
Описание
Уведомление безопасности об уязвимостях Novell Linux POS 9, Open Enterprise Server, SLE SDK 10, SUSE LINUX 10.1, SUSE LINUX 10.0, SUSE LINUX 9.3, SUSE LINUX 9.2, SuSE Linux Enterprise Server 8, SuSE Linux Openexchange Server 4, SUSE LINUX Retail Solution 8, SuSE Linux School Server, SuSE Linux Standard Server 8, SUSE SLES 10, SUSE SLES 9, UnitedLinux 1.0
Как исправить
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
openSUSE 10.0:
i586:
php4-curl - 4.4.0-6.20
php5-iconv - 5.0.4-9.20
php5-soap - 5.0.4-9.20
php4-gd - 4.4.0-6.20
php5-bcmath - 5.0.4-9.20
php4-wddx - 4.4.0-6.20
php4-fastcgi - 4.4.0-6.20
php5-mysql - 5.0.4-9.20
apache2-mod_php4 - 4.4.0-6.20
php5-pgsql - 5.0.4-9.20
php5-imap - 5.0.4-9.20
php5-wddx - 5.0.4-9.20
php4-unixODBC - 4.4.0-6.20
php5-curl - 5.0.4-9.20
php5-dom - 5.0.4-9.20
php5-exif - 5.0.4-9.20
php5-ldap - 5.0.4-9.20
php4-pgsql - 4.4.0-6.20
php4-session - 4.4.0-6.20
php5-mysqli - 5.0.4-9.20
php4-imap - 4.4.0-6.20
php5-fastcgi - 5.0.4-9.20
apache2-mod_php5 - 5.0.4-9.20
php5-pear - 5.0.4-9.20
php4-devel - 4.4.0-6.20
php4-mbstring - 4.4.0-6.20
php5-gd - 5.0.4-9.20
php5 - 5.0.4-9.20
php4-exif - 4.4.0-6.20
php5-ftp - 5.0.4-9.20
php4 - 4.4.0-6.20
php5-mbstring - 5.0.4-9.20
php5-devel - 5.0.4-9.20
php4-servlet - 4.4.0-6.20
php5-xmlrpc - 5.0.4-9.20
openSUSE 10.1:
i586:
php5-dom - 5.1.2-29.19
php5-ldap - 5.1.2-29.19
php5-xmlrpc - 5.1.2-29.19
php5-fastcgi - 5.1.2-29.19
php5-pear - 5.1.2-29.19
php5-soap - 5.1.2-29.19
apache2-mod_php5 - 5.1.2-29.19
php5-mbstring - 5.1.2-29.19
php5-bcmath - 5.1.2-29.19
php5-devel - 5.1.2-29.19
php5-iconv - 5.1.2-29.19
php5-dba - 5.1.2-29.19
php5-pgsql - 5.1.2-29.19
php5-imap - 5.1.2-29.19
php5-ftp - 5.1.2-29.19
php5 - 5.1.2-29.19
php5-pdo - 5.1.2-29.19
php5-mysqli - 5.1.2-29.19
php5-gd - 5.1.2-29.19
php5-curl - 5.1.2-29.19
php5-wddx - 5.1.2-29.19
php5-exif - 5.1.2-29.19
php5-mysql - 5.1.2-29.19
SUSE LINUX Enterprise Server 8:
s390x:
mod_php4 - 4.2.2-515
mod_php4-core - 4.2.2-515
mod_php4-devel - 4.2.2-515
mod_php4-servlet - 4.2.2-515
SUSE Linux Enterprise Server 9:
s390x:
apache-mod_php4 - 4.3.4-43.69
apache2-mod_php4 - 4.3.4-43.69
mod_php4-core - 4.3.4-43.69
mod_php4-servlet - 4.3.4-43.69
php4 - 4.3.4-43.69
php4-curl - 4.3.4-43.69
php4-devel - 4.3.4-43.69
php4-exif - 4.3.4-43.69
php4-fastcgi - 4.3.4-43.69
php4-gd - 4.3.4-43.69
php4-imap - 4.3.4-43.69
php4-mbstring - 4.3.4-43.69
php4-mysql - 4.3.4-43.69
php4-pear - 4.3.4-43.69
php4-pgsql - 4.3.4-43.69
php4-recode - 4.3.4-43.69
php4-servlet - 4.3.4-43.69
php4-session - 4.3.4-43.69
php4-sysvshm - 4.3.4-43.69
php4-wddx - 4.3.4-43.69
SUSE Linux Enterprise Server 10:
x86_64:
apache2-mod_php5 - 5.1.2-29.19
php5 - 5.1.2-29.19
php5-bcmath - 5.1.2-29.19
php5-curl - 5.1.2-29.19
php5-dba - 5.1.2-29.19
php5-devel - 5.1.2-29.19
php5-dom - 5.1.2-29.19
php5-exif - 5.1.2-29.19
php5-fastcgi - 5.1.2-29.19
php5-ftp - 5.1.2-29.19
php5-gd - 5.1.2-29.19
php5-iconv - 5.1.2-29.19
php5-imap - 5.1.2-29.19
php5-ldap - 5.1.2-29.19
php5-mbstring - 5.1.2-29.19
php5-mysql - 5.1.2-29.19
php5-mysqli - 5.1.2-29.19
php5-pdo - 5.1.2-29.19
php5-pear - 5.1.2-29.19
php5-pgsql - 5.1.2-29.19
php5-soap - 5.1.2-29.19
php5-wddx - 5.1.2-29.19
php5-xmlrpc - 5.1.2-29.19
Novell Open Enterprise Server (OES), SUSE Linux Enterprise Server 9, Novell Linux Point of Service 9:
x86_64:
apache-mod_php4 - 4.3.4-43.69
apache2-mod_php4 - 4.3.4-43.69
mod_php4-core - 4.3.4-43.69
mod_php4-servlet - 4.3.4-43.69
php4 - 4.3.4-43.69
php4-curl - 4.3.4-43.69
php4-devel - 4.3.4-43.69
php4-exif - 4.3.4-43.69
php4-fastcgi - 4.3.4-43.69
php4-gd - 4.3.4-43.69
php4-imap - 4.3.4-43.69
php4-mbstring - 4.3.4-43.69
php4-mysql - 4.3.4-43.69
php4-pear - 4.3.4-43.69
php4-pgsql - 4.3.4-43.69
php4-recode - 4.3.4-43.69
php4-servlet - 4.3.4-43.69
php4-session - 4.3.4-43.69
php4-sysvshm - 4.3.4-43.69
php4-wddx - 4.3.4-43.69
openSUSE 9.3:
i586:
php5-pear - 5.0.3-14.30
php5-pgsql - 5.0.3-14.30
php5-xmlrpc - 5.0.3-14.30
php5-fastcgi - 5.0.3-14.30
php4-pgsql - 4.3.10-14.30
php5-imap - 5.0.3-14.30
php5-dom - 5.0.3-14.30
php5-soap - 5.0.3-14.30
php5-ftp - 5.0.3-14.30
php5-iconv - 5.0.3-14.30
php5-wddx - 5.0.3-14.30
php4-gd - 4.3.10-14.30
php4-curl - 4.3.10-14.30
php4-devel - 4.3.10-14.30
php4 - 4.3.10-14.30
php5-dba - 5.0.3-14.30
php5-mysqli - 5.0.3-14.30
php4-pear - 4.3.10-14.30
php4-wddx - 4.3.10-14.30
php5-mbstring - 5.0.3-14.30
php4-session - 4.3.10-14.30
php5-mysql - 5.0.3-14.30
php5-gd - 5.0.3-14.30
mod_php4-servlet - 4.3.10-14.30
php5-curl - 5.0.3-14.30
apache2-mod_php5 - 5.0.3-14.30
php5-sysvshm - 5.0.3-14.30
php4-exif - 4.3.10-14.30
apache2-mod_php4 - 4.3.10-14.30
php5 - 5.0.3-14.30
php5-exif - 5.0.3-14.30
php5-ldap - 5.0.3-14.30
php4-imap - 4.3.10-14.30
php4-sysvshm - 4.3.10-14.30
php4-fastcgi - 4.3.10-14.30
php5-devel - 5.0.3-14.30
php5-bcmath - 5.0.3-14.30
php5-sysvmsg - 5.0.3-14.30
php4-mbstring - 4.3.10-14.30
SUSE Linux Enterprise 10 Software Development Kit:
x86_64:
apache2-mod_php5 - 5.1.2-29.19
php5 - 5.1.2-29.19
php5-bcmath - 5.1.2-29.19
php5-curl - 5.1.2-29.19
php5-dba - 5.1.2-29.19
php5-devel - 5.1.2-29.19
php5-dom - 5.1.2-29.19
php5-exif - 5.1.2-29.19
php5-fastcgi - 5.1.2-29.19
php5-ftp - 5.1.2-29.19
php5-gd - 5.1.2-29.19
php5-iconv - 5.1.2-29.19
php5-imap - 5.1.2-29.19
php5-ldap - 5.1.2-29.19
php5-mbstring - 5.1.2-29.19
php5-mysql - 5.1.2-29.19
php5-pear - 5.1.2-29.19
php5-pgsql - 5.1.2-29.19
php5-wddx - 5.1.2-29.19
SUSE LINUX Standard Server 8, SUSE LINUX Enterprise Server 8, SUSE LINUX Openexchange Server 4.0, SUSE LINUX Retail Solution 8:
x86_64:
mod_php4 - 4.2.2-515
mod_php4-core - 4.2.2-515
mod_php4-devel - 4.2.2-515
mod_php4-servlet - 4.2.2-515
openSUSE 9.2:
i586:
php4-session - 4.3.8-8.33
php4-imap - 4.3.8-8.33
php4-sysvshm - 4.3.8-8.33
mod_php4-servlet - 4.3.8-8.33
php4-fastcgi - 4.3.8-8.33
php4-gd - 4.3.8-8.33
php4-wddx - 4.3.8-8.33
php4-exif - 4.3.8-8.33
php4-mbstring - 4.3.8-8.33
apache2-mod_php4 - 4.3.8-8.33
php4-curl - 4.3.8-8.33
php4-pear - 4.3.8-8.33
php4-pgsql - 4.3.8-8.33
php4 - 4.3.8-8.33
php4-devel - 4.3.8-8.33
Ссылки
https://www.suse.com/support/security/advisories/2006_59_php.html

Источник: CVE
Наименование: CVE-2006-4625
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4625

Источник: CVE
Наименование: CVE-2006-4812
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4812