• info
• discussion
• exploit
• solution
• references

PHP Shared Memory Functions Resource Verification Arbitrary Code Execution Vulnerability

Solution:
The vendor released versions 4.4.5 and 5.2.1 to address this issue. Please see the references for more information.


PHP PHP 5.1.2

• Ubuntu libapache2-mod-php5_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/libapache2-mod-php5 _5.1.2-1ubuntu3.7_amd64.deb


• Ubuntu libapache2-mod-php5_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/libapache2-mod-php5 _5.1.2-1ubuntu3.7_i386.deb


• Ubuntu libapache2-mod-php5_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/libapache2-mod-php5 _5.1.2-1ubuntu3.7_powerpc.deb


• Ubuntu libapache2-mod-php5_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/libapache2-mod-php5 _5.1.2-1ubuntu3.7_sparc.deb


• Ubuntu php-pear_5.1.2-1ubuntu3.7_all.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php-pear_5.1.2-1ubu ntu3.7_all.deb


• Ubuntu php5-cgi_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-cgi_5.1.2-1ubu ntu3.7_amd64.deb


• Ubuntu php5-cgi_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-cgi_5.1.2-1ubu ntu3.7_i386.deb


• Ubuntu php5-cgi_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-cgi_5.1.2-1ubu ntu3.7_powerpc.deb


• Ubuntu php5-cgi_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-cgi_5.1.2-1ubu ntu3.7_sparc.deb


• Ubuntu php5-cli_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-cli_5.1.2-1ubu ntu3.7_amd64.deb


• Ubuntu php5-cli_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-cli_5.1.2-1ubu ntu3.7_i386.deb


• Ubuntu php5-cli_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-cli_5.1.2-1ubu ntu3.7_powerpc.deb


• Ubuntu php5-cli_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-cli_5.1.2-1ubu ntu3.7_sparc.deb


• Ubuntu php5-common_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-common_5.1.2-1 ubuntu3.7_amd64.deb


• Ubuntu php5-common_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-common_5.1.2-1 ubuntu3.7_i386.deb


• Ubuntu php5-common_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-common_5.1.2-1 ubuntu3.7_powerpc.deb


• Ubuntu php5-common_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-common_5.1.2-1 ubuntu3.7_sparc.deb


• Ubuntu php5-curl_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-curl_5.1.2-1ub untu3.7_amd64.deb


• Ubuntu php5-curl_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-curl_5.1.2-1ub untu3.7_i386.deb


• Ubuntu php5-curl_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-curl_5.1.2-1ub untu3.7_powerpc.deb


• Ubuntu php5-curl_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-curl_5.1.2-1ub untu3.7_sparc.deb


• Ubuntu php5-dev_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-dev_5.1.2-1ubu ntu3.7_amd64.deb


• Ubuntu php5-dev_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-dev_5.1.2-1ubu ntu3.7_i386.deb


• Ubuntu php5-dev_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-dev_5.1.2-1ubu ntu3.7_powerpc.deb


• Ubuntu php5-dev_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-dev_5.1.2-1ubu ntu3.7_sparc.deb


• Ubuntu php5-gd_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-gd_5.1.2-1ubun tu3.7_amd64.deb


• Ubuntu php5-gd_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-gd_5.1.2-1ubun tu3.7_i386.deb


• Ubuntu php5-gd_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-gd_5.1.2-1ubun tu3.7_powerpc.deb


• Ubuntu php5-gd_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-gd_5.1.2-1ubun tu3.7_sparc.deb


• Ubuntu php5-ldap_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-ldap_5.1.2-1ub untu3.7_amd64.deb


• Ubuntu php5-ldap_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-ldap_5.1.2-1ub untu3.7_i386.deb


• Ubuntu php5-ldap_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-ldap_5.1.2-1ub untu3.7_powerpc.deb


• Ubuntu php5-ldap_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-ldap_5.1.2-1ub untu3.7_sparc.deb


• Ubuntu php5-mhash_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-mhash_5.1.2-1u buntu3.7_amd64.deb


• Ubuntu php5-mhash_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-mhash_5.1.2-1u buntu3.7_i386.deb


• Ubuntu php5-mhash_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-mhash_5.1.2-1u buntu3.7_powerpc.deb


• Ubuntu php5-mhash_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-mhash_5.1.2-1u buntu3.7_sparc.deb


• Ubuntu php5-mysql_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-mysql_5.1.2-1u buntu3.7_amd64.deb


• Ubuntu php5-mysql_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-mysql_5.1.2-1u buntu3.7_i386.deb


• Ubuntu php5-mysql_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-mysql_5.1.2-1u buntu3.7_powerpc.deb


• Ubuntu php5-mysql_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-mysql_5.1.2-1u buntu3.7_sparc.deb


• Ubuntu php5-mysqli_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-mysqli_5.1.2-1 ubuntu3.7_amd64.deb


• Ubuntu php5-mysqli_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-mysqli_5.1.2-1 ubuntu3.7_i386.deb


• Ubuntu php5-mysqli_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-mysqli_5.1.2-1 ubuntu3.7_powerpc.deb


• Ubuntu php5-mysqli_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-mysqli_5.1.2-1 ubuntu3.7_sparc.deb


• Ubuntu php5-odbc_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-odbc_5.1.2-1ub untu3.7_amd64.deb


• Ubuntu php5-odbc_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-odbc_5.1.2-1ub untu3.7_i386.deb


• Ubuntu php5-odbc_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-odbc_5.1.2-1ub untu3.7_powerpc.deb


• Ubuntu php5-odbc_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-odbc_5.1.2-1ub untu3.7_sparc.deb


• Ubuntu php5-pgsql_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-pgsql_5.1.2-1u buntu3.7_amd64.deb


• Ubuntu php5-pgsql_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-pgsql_5.1.2-1u buntu3.7_i386.deb


• Ubuntu php5-pgsql_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-pgsql_5.1.2-1u buntu3.7_powerpc.deb


• Ubuntu php5-pgsql_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-pgsql_5.1.2-1u buntu3.7_sparc.deb


• Ubuntu php5-recode_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-recode_5.1.2-1 ubuntu3.7_amd64.deb


• Ubuntu php5-recode_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-recode_5.1.2-1 ubuntu3.7_i386.deb


• Ubuntu php5-recode_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-recode_5.1.2-1 ubuntu3.7_powerpc.deb


• Ubuntu php5-recode_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-recode_5.1.2-1 ubuntu3.7_sparc.deb


• Ubuntu php5-snmp_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-snmp_5.1.2-1ub untu3.7_amd64.deb


• Ubuntu php5-snmp_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-snmp_5.1.2-1ub untu3.7_i386.deb


• Ubuntu php5-snmp_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-snmp_5.1.2-1ub untu3.7_powerpc.deb


• Ubuntu php5-snmp_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-snmp_5.1.2-1ub untu3.7_sparc.deb


• Ubuntu php5-sqlite_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-sqlite_5.1.2-1 ubuntu3.7_amd64.deb


• Ubuntu php5-sqlite_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-sqlite_5.1.2-1 ubuntu3.7_i386.deb


• Ubuntu php5-sqlite_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-sqlite_5.1.2-1 ubuntu3.7_powerpc.deb


• Ubuntu php5-sqlite_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-sqlite_5.1.2-1 ubuntu3.7_sparc.deb


• Ubuntu php5-sybase_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-sybase_5.1.2-1 ubuntu3.7_amd64.deb


• Ubuntu php5-sybase_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-sybase_5.1.2-1 ubuntu3.7_i386.deb


• Ubuntu php5-sybase_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-sybase_5.1.2-1 ubuntu3.7_powerpc.deb


• Ubuntu php5-sybase_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-sybase_5.1.2-1 ubuntu3.7_sparc.deb


• Ubuntu php5-xmlrpc_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-xmlrpc_5.1.2-1 ubuntu3.7_amd64.deb


• Ubuntu php5-xmlrpc_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-xmlrpc_5.1.2-1 ubuntu3.7_i386.deb


• Ubuntu php5-xmlrpc_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-xmlrpc_5.1.2-1 ubuntu3.7_powerpc.deb


• Ubuntu php5-xmlrpc_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-xmlrpc_5.1.2-1 ubuntu3.7_sparc.deb


• Ubuntu php5-xsl_5.1.2-1ubuntu3.7_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-xsl_5.1.2-1ubu ntu3.7_amd64.deb


• Ubuntu php5-xsl_5.1.2-1ubuntu3.7_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-xsl_5.1.2-1ubu ntu3.7_i386.deb


• Ubuntu php5-xsl_5.1.2-1ubuntu3.7_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-xsl_5.1.2-1ubu ntu3.7_powerpc.deb


• Ubuntu php5-xsl_5.1.2-1ubuntu3.7_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5-xsl_5.1.2-1ubu ntu3.7_sparc.deb


• Ubuntu php5_5.1.2-1ubuntu3.7_all.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/p/php5/php5_5.1.2-1ubuntu3 .7_all.deb