• info
• discussion
• exploit
• solution
• references

PHP Str_Replace() Integer Overflow Vulnerability

Solution:
The vendor released PHP 4.4.5 and 5.2.1 to address this issue. Please see the references for more information.


HP Systems Management HomePage 2.1.7.168

• HP HP System Management Homepage for Linux
  http://h18023.www1.hp.com/support/files/server/us/download/26864.html


• HP HP System Management Homepage for Linux (AMD64/EM64T)
  http://h18023.www1.hp.com/support/files/server/us/download/26866.html


• HP HP System Management Homepage for Windows
  http://h18023.www1.hp.com/support/files/server/us/download/26977.html

PHP PHP 5.2

• PHP PHP 5.2.1
  http://www.php.net/downloads.php#v5

PHP PHP 4.4.4

• PHP PHP 4.4.5
  http://www.php.net/downloads.php#v4

HP Secure Web Server for HP Tru64 UNIX 6.6.4

• HP sws_v6_6_5_kit.tar.gz
  http://h30097.www3.hp.com/internet/download.htm#sws