• info
• discussion
• exploit
• solution
• references

PEAR Net_Ping 'ping()' Function Arbitrary Argument Injection Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 4.0 amd64

• Debian php-net-ping_2.4.2-1+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb

Debian Linux 4.0 ia-32

• Debian php-net-ping_2.4.2-1+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb

Debian Linux 4.0 arm

• Debian php-net-ping_2.4.2-1+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb

Debian Linux 5.0 hppa

• Debian php-net-ping_2.4.2-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb

Debian Linux 5.0 ia-64

• Debian php-net-ping_2.4.2-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb

Debian Linux 4.0 hppa

• Debian php-net-ping_2.4.2-1+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb

Debian Linux 4.0 sparc

• Debian php-net-ping_2.4.2-1+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb

Debian Linux 4.0 s/390

• Debian php-net-ping_2.4.2-1+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb

Debian Linux 5.0 m68k

• Debian php-net-ping_2.4.2-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb

Debian Linux 5.0 arm

• Debian php-net-ping_2.4.2-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb

Debian Linux 4.0 powerpc

• Debian php-net-ping_2.4.2-1+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb

Debian Linux 4.0 alpha

• Debian php-net-ping_2.4.2-1+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb

Debian Linux 4.0 armel

• Debian php-net-ping_2.4.2-1+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb

Debian Linux 5.0 armel

• Debian php-net-ping_2.4.2-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb

Debian Linux 4.0 m68k

• Debian php-net-ping_2.4.2-1+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb

Debian Linux 5.0

• Debian php-net-ping_2.4.2-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb

Debian Linux 4.0

• Debian php-net-ping_2.4.2-1+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb

Debian Linux 4.0 mipsel

• Debian php-net-ping_2.4.2-1+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb

Debian Linux 5.0 amd64

• Debian php-net-ping_2.4.2-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb

Debian Linux 5.0 alpha

• Debian php-net-ping_2.4.2-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb

Debian Linux 5.0 ia-32

• Debian php-net-ping_2.4.2-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb

Debian Linux 5.0 mips

• Debian php-net-ping_2.4.2-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb

Debian Linux 5.0 s/390

• Debian php-net-ping_2.4.2-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb

Debian Linux 5.0 mipsel

• Debian php-net-ping_2.4.2-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb

Debian Linux 5.0 powerpc

• Debian php-net-ping_2.4.2-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb

Debian Linux 4.0 ia-64

• Debian php-net-ping_2.4.2-1+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb

Debian Linux 4.0 mips

• Debian php-net-ping_2.4.2-1+etch1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+etch1_all.deb

Debian Linux 5.0 sparc

• Debian php-net-ping_2.4.2-1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/php-net-ping/php-net-pi ng_2.4.2-1+lenny1_all.deb