Fedora 12 : maniadrive-1.2-22.fc12 / php-5.3.3-1.fc12 / php-eaccelerator-0.9.6.1-2.fc12 (2010-11428)

NASLDB: Fedora 12 : maniadrive-1.2-22.fc12 / php-5.3.3-1.fc12 / php-eaccelerator-0.9.6.1-2.fc12 (2010-11428)

General

ID: 48411
Name: Fedora 12 : maniadrive-1.2-22.fc12 / php-5.3.3-1.fc12 / php-eaccelerator-0.9.6.1-2.fc12 (2010-11428)

Summary: Checks rpm output for the updated packages

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Temporal Vector: –

Port: 0
Family: Fedora Local Security Checks
Type: Local

Description

Update to PHP 5.3.3 Security Enhancements and Fixes in PHP 5.3.3: *
Rewrote var_export() to use smart_str rather than output buffering,
prevents data disclosure if a fatal error occurs (CVE-2010-2531). *
Fixed a possible resource destruction issues in shm_put_var(). * Fixed
a possible information leak because of interruption of XOR operator. *
Fixed a possible memory corruption because of unexpected call-time
pass by refernce and following memory clobbering through callbacks. *
Fixed a possible memory corruption in ArrayObject::uasort(). * Fixed a
possible memory corruption in parse_str(). * Fixed a possible memory
corruption in pack(). * Fixed a possible memory corruption in
substr_replace(). * Fixed a possible memory corruption in
addcslashes(). * Fixed a possible stack exhaustion inside fnmatch(). *
Fixed a possible dechunking filter buffer overflow. * Fixed a possible
arbitrary memory access inside sqlite extension. * Fixed string format
validation inside phar extension. * Fixed handling of session variable
serialization on certain prefix characters. * Fixed a NULL pointer
dereference when processing invalid XML-RPC requests (Fixes
CVE-2010-0397, bug #51288). * Fixed SplObjectStorage unserialization
problems (CVE-2010-2225). * Fixed possible buffer overflows in
mysqlnd_list_fields, mysqlnd_change_user. * Fixed possible buffer
overflows when handling error packets in mysqlnd. Full upstream
Changelog: http://www.php.net/ChangeLog-5.php#5.3.3

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: CVE-2010-1914
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: –
Patch Release: 2010/07/27
Plugin Release: 2010/08/24

Plugin

Version: 1.3
Filename: fedora_2010-11428.nasl
Filesize: 5412 bytes
MD5 Hash: ac6b39e1a2aaeb77924995c625ae33b2

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list
Dependencies: "ssh_get_info.nasl"