This is a read-only archive. No new posts or registrations. Privacy Page
Discussion

PHP Multiple Vulns - Update Available

1 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

FYI…

- http://secunia.com/advisories/26642/
Release Date: 2007-08-31
Critical: Moderately critical
Impact: Unknown, Security Bypass
Where: From remote
Solution Status: Vendor Patch
Software: PHP 5.2.x
…The vulnerabilities are reported in PHP versions prior to 5.2.4.
Solution: Update to PHP version 5.2.4.
http://www.php.net/downloads.php …
Original Advisory:
http://www.php.net/releases/5_2_4.php

.
FYI…

- http://secunia.com/advisories/27648/
Release Date: 2007-11-12
Critical: Moderately critical
Impact: Unknown, Security Bypass
Where: From remote
Solution Status: Vendor Patch
Software: PHP 5.2.x
…vulnerabilities and weaknesses have been reported in PHP, where some have unknown impacts and others can be exploited to bypass certain security restrictions.
Solution: Update to version 5.2.5.
http://www.php.net/downloads.php …
Original Advisory:
http://www.php.net/releases/5_2_5.php

:ph34r:
FYI…

- http://secunia.com/advisories/28318/
Release Date: 2008-01-03
Critical: Moderately critical
Impact: Unknown, Security Bypass
Where: From remote
Solution Status: Vendor Patch
Software: PHP 4.4.x
Solution: Update to version 4.4.8.
http://www.php.net/downloads.php …
(Note: Support for PHP 4 has been discontinued since 2007-12-31. Please consider upgrading to PHP 5.2)
Original Advisory: http://www.php.net/releases/4_4_8.php
"…This release wraps up all the outstanding patches for the PHP 4.4 series, and is therefore the last normal PHP 4.4 release…"

ChangeLog
- http://www.php.net/ChangeLog-4.php#4.4.8

> http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3378

:ph34r: