PHP 5.2.5 and Prior Versions Multiple Vulnerabilities

Threat level definition

PHP 5.2.5 and Prior Versions Multiple Vulnerabilities

References:

cgi_main.c 2008/02/28 00:51:56 1.267.2.15.2.50.2.13 (PHP)
PHP 5.2.6 ChangeLog (PHP)
PHP Homepage (PHP)
Advisory SE-2008-02: PHP GENERATE_SEED() Weak Random Number Seed Vulnerability (Stefan Esser )
Advisory SE-2008-03: PHP Multibyte Shell Command Escaping Bypass Vulnerability (Stefan Esser )
HPSBUX02342 SSRT080063 rev.1 - HP-UX Running Apache or Tomcat with PHP, Remote E (HP)
PHP GENERATE_SEED() Weak Random Number Seed Vulnerability (SektionEins GmbH)
PHP Multibyte Shell Command Escaping Bypass Vulnerability (SektionEins GmbH)
RHSA-2008:0544-6 php security update (Red Hat)
RHSA-2008:0545-6 php security and bug fix update (Red Hat)
RHSA-2008:0546-3 Moderate: php security update (Red Hat)
RHSA-2008:0582-2 Moderate: php security update (Red Hat)
Vulnerability Note VU#147027 PHP path translation vulnerability (US-CERT)

Privacy Statement
Copyright 2007, SecurityFocus