| Revision Date: | 2013-04-29 | Version: | 11 | | Title: | The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an internal flag that enables register_globals and allows attackers to exploit vulnerabilities in PHP applications that would otherwise be protected. | | Description: | The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an internal flag that enables register_globals and allows attackers to exploit vulnerabilities in PHP applications that would otherwise be protected. | | Family: | unix | Class: | vulnerability | | Status: | ACCEPTED | Reference(s): | CVE-2005-3389
| | Platform(s): | CentOS Linux 3
CentOS Linux 4
Oracle Linux 4
Red Hat Enterprise Linux 3
Red Hat Enterprise Linux 4
| Product(s): | | | Definition Synopsis | | OS Section: RHEL3, CentOS3 RHEL3 or CentOS3
The operating system installed on the system is Red Hat Enterprise Linux 3
OR CentOS Linux 3.x
AND Configuration section
php is earlier than 0:4.3.2-26.ent
OR php-pgsql is earlier than 0:4.3.2-26.ent
OR php-mysql is earlier than 0:4.3.2-26.ent
OR php-ldap is earlier than 0:4.3.2-26.ent
OR php-imap is earlier than 0:4.3.2-26.ent
OR php-odbc is earlier than 0:4.3.2-26.ent
OR php-devel is earlier than 0:4.3.2-26.ent
OR OS Section: RHEL4, CentOS4, Oracle Linux 4
RHEL4, CentOS4 or Oracle Linux 4
The operating system installed on the system is Red Hat Enterprise Linux 4
OR CentOS Linux 4.x
OR Oracle Linux 4.x
AND Configuration section
php-xmlrpc is earlier than 0:4.3.9-3.9
OR php-snmp is earlier than 0:4.3.9-3.9
OR php-domxml is earlier than 0:4.3.9-3.9
OR php-mysql is earlier than 0:4.3.9-3.9
OR php-imap is earlier than 0:4.3.9-3.9
OR php-gd is earlier than 0:4.3.9-3.9
OR php is earlier than 0:4.3.9-3.9
OR php-mbstring is earlier than 0:4.3.9-3.9
OR php-pgsql is earlier than 0:4.3.9-3.9
OR php-pear is earlier than 0:4.3.9-3.9
OR php-ldap is earlier than 0:4.3.9-3.9
OR php-odbc is earlier than 0:4.3.9-3.9
OR php-ncurses is earlier than 0:4.3.9-3.9
OR php-devel is earlier than 0:4.3.9-3.9
|
|