PHP 5.2.5 and Prior Versions Multiple Vulnerabilities

PHP 5.2.5 and Prior Versions Multiple Vulnerabilities

References:

cgi_main.c 2008/02/28 00:51:56 1.267.2.15.2.50.2.13 (PHP)
PHP 5.2.6 ChangeLog (PHP)
PHP Homepage (PHP)
[SECURITY] [DSA 1789-1] New php5 packages fix several vulnerabilities (Thijs Kinkhorst )
Advisory SE-2008-02: PHP GENERATE_SEED() Weak Random Number Seed Vulnerability (Stefan Esser )
Advisory SE-2008-03: PHP Multibyte Shell Command Escaping Bypass Vulnerability (Stefan Esser )
ASA-2008-326 - php security update (RHSA-2008-0582) (Avaya)
Avaya Security Advisory ASA-2008-313 (Avaya)
HPSBUX02342 SSRT080063 rev.1 - HP-UX Running Apache or Tomcat with PHP, Remote E (HP)
PHP GENERATE_SEED() Weak Random Number Seed Vulnerability (SektionEins GmbH)
PHP Multibyte Shell Command Escaping Bypass Vulnerability (SektionEins GmbH)
RHSA-2008:0544-6 php security update (Red Hat)
RHSA-2008:0545-6 php security and bug fix update (Red Hat)
RHSA-2008:0546-3 Moderate: php security update (Red Hat)
RHSA-2008:0582-2 Moderate: php security update (Red Hat)
Vulnerability Note VU#147027 PHP path translation vulnerability (US-CERT)

Privacy Statement
Copyright 2010, SecurityFocus