PHP SafeMode Arbitrary File Execution Vulnerability Solution:
Red Hat has re-released packages fixing dependency issues with the PHP package. This information is given in detail in Red Hat Security Advisory RHSA-2002:102-33, and is available at http://rhn.redhat.com/errata/RHSA-2002-102.html.
HP has released an alert for HP Secure OS, advising users to apply fixes detailed in Red Hat Security Advisory RHSA-2002:102-33. See referenced advisory for more details, and visit above URL for fixes.
Sun as released fixes to address this issue in a variety of devices which use PHP. Users are advised to upgrade as soon as possible.
FreeBSD has released upgrades. Users are advised to upgrade their Ports
collection and reinstall the affected port.
Conectiva has released an advisory (CLA-2002:545) which contains fixes for this issue. Please see the attached advisory for further details on obtaining fixes.
Gentoo Linux has released an advisory. Users of dev-php/php-4.2.2-r1 and/or dev-php/mod_php-4.2.2-r1 and earlier are advised to update systems by issuing the following commands:
emerge rsync
emerge php
and/or
emerge mod_php
emerge clean
Fixes available:
Sun Cobalt RaQ 550
Sun Cobalt Qube 3
Sun Cobalt RaQ 4
Sun Cobalt RaQ XTR
PHP PHP 4.0.3
PHP PHP 4.0.4
PHP PHP 4.0.5
PHP PHP 4.0.6
PHP PHP 4.0.7 RC2
PHP PHP 4.0.7 RC1
PHP PHP 4.0.7 RC3
PHP PHP 4.0.7
PHP PHP 4.1 .0
PHP PHP 4.1.1
PHP PHP 4.1.2
PHP PHP 4.2 .0
PHP PHP 4.2.1
Sun Linux 5.0
