Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:N)
Производитель ПО
Наименование ПО
apache2-mod_php4
(any)
apache2-mod_php5
(any)
mod_php4-core
(any)
mod_php4-servlet
(any)
php4
(any)
php4-32bit
(any)
php4-devel
(any)
php4-exif
(any)
php4-fastcgi
(any)
php4-imap
(any)
php4-mbstring
(any)
php4-mysql
(any)
php4-pear
(any)
php4-recode
(any)
php4-servlet
(any)
php4-session
(any)
php4-sysvshm
(any)
php4-unixODBC
(any)
php4-wddx
(any)
php5
(any)
php5-devel
(any)
php5-exif
(any)
php5-fastcgi
(any)
php5-mbstring
(any)
php5-pear
(any)
php5-snmp
(any)
php5-sysvmsg
(any)
php5-sysvshm
(any)
Описание
Уведомление безопасности об уязвимостях SUSE Linux 10.0, SUSE Linux 9.3, SUSE Linux 9.2, SUSE Linux 9.1, SUSE Linux Enterprise Server 8, SUSE SLES 9, UnitedLinux 1.0
Как исправить
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
openSUSE 10.0:
i586:
php5-pear - 5.0.4-9.10
php4-fastcgi - 4.4.0-6.10
apache2-mod_php5 - 5.0.4-9.10
php4 - 4.4.0-6.10
php5-snmp - 5.0.4-9.10
apache2-mod_php4 - 4.4.0-6.10
php5-fastcgi - 5.0.4-9.10
php4-servlet - 4.4.0-6.10
php5-mbstring - 5.0.4-9.10
php4-exif - 4.4.0-6.10
php4-unixODBC - 4.4.0-6.10
php4-mbstring - 4.4.0-6.10
php5-exif - 5.0.4-9.10
php5 - 5.0.4-9.10
openSUSE 9.3:
i586:
php5-sysvshm - 5.0.3-14.20
php4-fastcgi - 4.3.10-14.20
php4-session - 4.3.10-14.20
php5-exif - 5.0.3-14.20
php5 - 5.0.3-14.20
php5-fastcgi - 5.0.3-14.20
mod_php4-servlet - 4.3.10-14.20
php4-sysvshm - 4.3.10-14.20
php4-pear - 4.3.10-14.20
php4-devel - 4.3.10-14.20
php4 - 4.3.10-14.20
php5-pear - 5.0.3-14.20
php4-mbstring - 4.3.10-14.20
php5-devel - 5.0.3-14.20
php4-exif - 4.3.10-14.20
php5-mbstring - 5.0.3-14.20
apache2-mod_php4 - 4.3.10-14.20
php5-sysvmsg - 5.0.3-14.20
apache2-mod_php5 - 5.0.3-14.20
openSUSE 9.2:
i586:
php4-pear - 4.3.8-8.23
apache2-mod_php4 - 4.3.8-8.23
php4 - 4.3.8-8.23
php4-sysvshm - 4.3.8-8.23
php4-mbstring - 4.3.8-8.23
php4-fastcgi - 4.3.8-8.23
php4-session - 4.3.8-8.23
mod_php4-servlet - 4.3.8-8.23
php4-exif - 4.3.8-8.23
php4-devel - 4.3.8-8.23
Novell Open Enterprise Server (OES), SUSE Linux Enterprise Server 9, Novell Linux Point of Service 9:
x86_64:
apache-mod_php4 - 4.3.4-43.69
apache2-mod_php4 - 4.3.4-43.69
mod_php4-core - 4.3.4-43.69
mod_php4-servlet - 4.3.4-43.69
php4 - 4.3.4-43.69
php4-curl - 4.3.4-43.69
php4-devel - 4.3.4-43.69
php4-exif - 4.3.4-43.69
php4-fastcgi - 4.3.4-43.69
php4-gd - 4.3.4-43.69
php4-imap - 4.3.4-43.69
php4-mbstring - 4.3.4-43.69
php4-mysql - 4.3.4-43.69
php4-pear - 4.3.4-43.69
php4-pgsql - 4.3.4-43.69
php4-recode - 4.3.4-43.69
php4-servlet - 4.3.4-43.69
php4-session - 4.3.4-43.69
php4-sysvshm - 4.3.4-43.69
php4-wddx - 4.3.4-43.69
apache-mod_php4 - 4.3.4-43.66
apache2-mod_php4 - 4.3.4-43.66
mod_php4-core - 4.3.4-43.66
mod_php4-servlet - 4.3.4-43.66
php4 - 4.3.4-43.66
php4-curl - 4.3.4-43.66
php4-devel - 4.3.4-43.66
php4-exif - 4.3.4-43.66
php4-fastcgi - 4.3.4-43.66
php4-gd - 4.3.4-43.66
php4-imap - 4.3.4-43.66
php4-mbstring - 4.3.4-43.66
php4-mysql - 4.3.4-43.66
php4-pear - 4.3.4-43.66
php4-pgsql - 4.3.4-43.66
php4-recode - 4.3.4-43.66
php4-servlet - 4.3.4-43.66
php4-session - 4.3.4-43.66
php4-sysvshm - 4.3.4-43.66
php4-wddx - 4.3.4-43.66
openSUSE 9.1:
i586:
mod_php4-servlet - 4.3.4-43.53
php4-mbstring - 4.3.4-43.53
php4-recode - 4.3.4-43.53
php4-servlet - 4.3.4-43.53
php4-devel - 4.3.4-43.53
php4-session - 4.3.4-43.53
php4-mysql - 4.3.4-43.53
mod_php4-core - 4.3.4-43.53
php4-pear - 4.3.4-43.53
php4-wddx - 4.3.4-43.53
php4-exif - 4.3.4-43.53
php4-sysvshm - 4.3.4-43.53
php4 - 4.3.4-43.53
php4-imap - 4.3.4-43.53
apache2-mod_php4 - 4.3.4-43.53
php4-fastcgi - 4.3.4-43.53
SUSE LINUX Enterprise Server 8:
s390x:
mod_php4 - 4.2.2-515
mod_php4-core - 4.2.2-515
mod_php4-devel - 4.2.2-515
mod_php4-servlet - 4.2.2-515
mod_php4 - 4.2.2-512
mod_php4-core - 4.2.2-512
mod_php4-devel - 4.2.2-512
mod_php4-servlet - 4.2.2-512
SUSE Linux Enterprise Server 9:
s390x:
apache-mod_php4 - 4.3.4-43.69
apache2-mod_php4 - 4.3.4-43.69
mod_php4-core - 4.3.4-43.69
mod_php4-servlet - 4.3.4-43.69
php4 - 4.3.4-43.69
php4-curl - 4.3.4-43.69
php4-devel - 4.3.4-43.69
php4-exif - 4.3.4-43.69
php4-fastcgi - 4.3.4-43.69
php4-gd - 4.3.4-43.69
php4-imap - 4.3.4-43.69
php4-mbstring - 4.3.4-43.69
php4-mysql - 4.3.4-43.69
php4-pear - 4.3.4-43.69
php4-pgsql - 4.3.4-43.69
php4-recode - 4.3.4-43.69
php4-servlet - 4.3.4-43.69
php4-session - 4.3.4-43.69
php4-sysvshm - 4.3.4-43.69
php4-wddx - 4.3.4-43.69
apache-mod_php4 - 4.3.4-43.66
apache2-mod_php4 - 4.3.4-43.66
mod_php4-core - 4.3.4-43.66
mod_php4-servlet - 4.3.4-43.66
php4 - 4.3.4-43.66
php4-curl - 4.3.4-43.66
php4-devel - 4.3.4-43.66
php4-exif - 4.3.4-43.66
php4-fastcgi - 4.3.4-43.66
php4-gd - 4.3.4-43.66
php4-imap - 4.3.4-43.66
php4-mbstring - 4.3.4-43.66
php4-mysql - 4.3.4-43.66
php4-pear - 4.3.4-43.66
php4-pgsql - 4.3.4-43.66
php4-recode - 4.3.4-43.66
php4-servlet - 4.3.4-43.66
php4-session - 4.3.4-43.66
php4-sysvshm - 4.3.4-43.66
php4-wddx - 4.3.4-43.66
SUSE LINUX Standard Server 8, SUSE LINUX Enterprise Server 8, SUSE LINUX Openexchange Server 4.0, SUSE LINUX Retail Solution 8:
x86_64:
mod_php4 - 4.2.2-515
mod_php4-core - 4.2.2-515
mod_php4-devel - 4.2.2-515
mod_php4-servlet - 4.2.2-515
mod_php4 - 4.2.2-512
mod_php4-core - 4.2.2-512
mod_php4-devel - 4.2.2-512
mod_php4-servlet - 4.2.2-512
openSUSE 10.0:
i586:
php5-pear - 5.0.4-9.10
php4-fastcgi - 4.4.0-6.10
apache2-mod_php5 - 5.0.4-9.10
php4 - 4.4.0-6.10
php5-snmp - 5.0.4-9.10
apache2-mod_php4 - 4.4.0-6.10
php5-fastcgi - 5.0.4-9.10
php4-servlet - 4.4.0-6.10
php5-mbstring - 5.0.4-9.10
php4-exif - 4.4.0-6.10
php4-unixODBC - 4.4.0-6.10
php4-mbstring - 4.4.0-6.10
php5-exif - 5.0.4-9.10
php5 - 5.0.4-9.10
openSUSE 9.3:
i586:
php5-sysvshm - 5.0.3-14.20
php4-fastcgi - 4.3.10-14.20
php4-session - 4.3.10-14.20
php5-exif - 5.0.3-14.20
php5 - 5.0.3-14.20
php5-fastcgi - 5.0.3-14.20
mod_php4-servlet - 4.3.10-14.20
php4-sysvshm - 4.3.10-14.20
php4-pear - 4.3.10-14.20
php4-devel - 4.3.10-14.20
php4 - 4.3.10-14.20
php5-pear - 5.0.3-14.20
php4-mbstring - 4.3.10-14.20
php5-devel - 5.0.3-14.20
php4-exif - 4.3.10-14.20
php5-mbstring - 5.0.3-14.20
apache2-mod_php4 - 4.3.10-14.20
php5-sysvmsg - 5.0.3-14.20
apache2-mod_php5 - 5.0.3-14.20
openSUSE 9.2:
i586:
php4-pear - 4.3.8-8.23
apache2-mod_php4 - 4.3.8-8.23
php4 - 4.3.8-8.23
php4-sysvshm - 4.3.8-8.23
php4-mbstring - 4.3.8-8.23
php4-fastcgi - 4.3.8-8.23
php4-session - 4.3.8-8.23
mod_php4-servlet - 4.3.8-8.23
php4-exif - 4.3.8-8.23
php4-devel - 4.3.8-8.23
Novell Open Enterprise Server (OES), SUSE Linux Enterprise Server 9, Novell Linux Point of Service 9:
x86_64:
apache-mod_php4 - 4.3.4-43.69
apache2-mod_php4 - 4.3.4-43.69
mod_php4-core - 4.3.4-43.69
mod_php4-servlet - 4.3.4-43.69
php4 - 4.3.4-43.69
php4-curl - 4.3.4-43.69
php4-devel - 4.3.4-43.69
php4-exif - 4.3.4-43.69
php4-fastcgi - 4.3.4-43.69
php4-gd - 4.3.4-43.69
php4-imap - 4.3.4-43.69
php4-mbstring - 4.3.4-43.69
php4-mysql - 4.3.4-43.69
php4-pear - 4.3.4-43.69
php4-pgsql - 4.3.4-43.69
php4-recode - 4.3.4-43.69
php4-servlet - 4.3.4-43.69
php4-session - 4.3.4-43.69
php4-sysvshm - 4.3.4-43.69
php4-wddx - 4.3.4-43.69
apache-mod_php4 - 4.3.4-43.66
apache2-mod_php4 - 4.3.4-43.66
mod_php4-core - 4.3.4-43.66
mod_php4-servlet - 4.3.4-43.66
php4 - 4.3.4-43.66
php4-curl - 4.3.4-43.66
php4-devel - 4.3.4-43.66
php4-exif - 4.3.4-43.66
php4-fastcgi - 4.3.4-43.66
php4-gd - 4.3.4-43.66
php4-imap - 4.3.4-43.66
php4-mbstring - 4.3.4-43.66
php4-mysql - 4.3.4-43.66
php4-pear - 4.3.4-43.66
php4-pgsql - 4.3.4-43.66
php4-recode - 4.3.4-43.66
php4-servlet - 4.3.4-43.66
php4-session - 4.3.4-43.66
php4-sysvshm - 4.3.4-43.66
php4-wddx - 4.3.4-43.66
openSUSE 9.1:
i586:
mod_php4-servlet - 4.3.4-43.53
php4-mbstring - 4.3.4-43.53
php4-recode - 4.3.4-43.53
php4-servlet - 4.3.4-43.53
php4-devel - 4.3.4-43.53
php4-session - 4.3.4-43.53
php4-mysql - 4.3.4-43.53
mod_php4-core - 4.3.4-43.53
php4-pear - 4.3.4-43.53
php4-wddx - 4.3.4-43.53
php4-exif - 4.3.4-43.53
php4-sysvshm - 4.3.4-43.53
php4 - 4.3.4-43.53
php4-imap - 4.3.4-43.53
apache2-mod_php4 - 4.3.4-43.53
php4-fastcgi - 4.3.4-43.53
SUSE LINUX Enterprise Server 8:
s390x:
mod_php4 - 4.2.2-515
mod_php4-core - 4.2.2-515
mod_php4-devel - 4.2.2-515
mod_php4-servlet - 4.2.2-515
mod_php4 - 4.2.2-512
mod_php4-core - 4.2.2-512
mod_php4-devel - 4.2.2-512
mod_php4-servlet - 4.2.2-512
SUSE Linux Enterprise Server 9:
s390x:
apache-mod_php4 - 4.3.4-43.69
apache2-mod_php4 - 4.3.4-43.69
mod_php4-core - 4.3.4-43.69
mod_php4-servlet - 4.3.4-43.69
php4 - 4.3.4-43.69
php4-curl - 4.3.4-43.69
php4-devel - 4.3.4-43.69
php4-exif - 4.3.4-43.69
php4-fastcgi - 4.3.4-43.69
php4-gd - 4.3.4-43.69
php4-imap - 4.3.4-43.69
php4-mbstring - 4.3.4-43.69
php4-mysql - 4.3.4-43.69
php4-pear - 4.3.4-43.69
php4-pgsql - 4.3.4-43.69
php4-recode - 4.3.4-43.69
php4-servlet - 4.3.4-43.69
php4-session - 4.3.4-43.69
php4-sysvshm - 4.3.4-43.69
php4-wddx - 4.3.4-43.69
apache-mod_php4 - 4.3.4-43.66
apache2-mod_php4 - 4.3.4-43.66
mod_php4-core - 4.3.4-43.66
mod_php4-servlet - 4.3.4-43.66
php4 - 4.3.4-43.66
php4-curl - 4.3.4-43.66
php4-devel - 4.3.4-43.66
php4-exif - 4.3.4-43.66
php4-fastcgi - 4.3.4-43.66
php4-gd - 4.3.4-43.66
php4-imap - 4.3.4-43.66
php4-mbstring - 4.3.4-43.66
php4-mysql - 4.3.4-43.66
php4-pear - 4.3.4-43.66
php4-pgsql - 4.3.4-43.66
php4-recode - 4.3.4-43.66
php4-servlet - 4.3.4-43.66
php4-session - 4.3.4-43.66
php4-sysvshm - 4.3.4-43.66
php4-wddx - 4.3.4-43.66
SUSE LINUX Standard Server 8, SUSE LINUX Enterprise Server 8, SUSE LINUX Openexchange Server 4.0, SUSE LINUX Retail Solution 8:
x86_64:
mod_php4 - 4.2.2-515
mod_php4-core - 4.2.2-515
mod_php4-devel - 4.2.2-515
mod_php4-servlet - 4.2.2-515
mod_php4 - 4.2.2-512
mod_php4-core - 4.2.2-512
mod_php4-devel - 4.2.2-512
mod_php4-servlet - 4.2.2-512
Ссылки
https://www.suse.com/support/security/advisories/05-05-2006.html
Источник: CVE
Наименование: CVE-2006-1490
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1490
Источник: CVE
Наименование: CVE-2006-1014
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1014
Источник: CVE
Наименование: CVE-2006-1494
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1494
Источник: CVE
Наименование: CVE-2006-1015
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1015
Источник: CVE
Наименование: CVE-2006-0996
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0996
Источник: CVE
Наименование: CVE-2006-1490
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1490
Источник: CVE
Наименование: CVE-2006-1014
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1014
Источник: CVE
Наименование: CVE-2006-1494
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1494
Источник: CVE
Наименование: CVE-2006-1015
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1015
Источник: CVE
Наименование: CVE-2006-0996
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0996