Oval Definition:	oval:org.mitre.oval:def:19494
Revision Date: 2015-04-20 Version: 26 Title: HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Access Restriction Bypass Description: PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the file_exists function. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2006-7243 Platform(s): HP-UX 11 Product(s): Definition Synopsis Criteria meets HP Security Bulletin HPSBUX02741 platforms HP-UX B.11.23 OR HP-UX B.11.31 AND hpuxws22TOMCAT.TOMCAT version is less than B.5.5.35.01 OR Criteria meets HP Security Bulletin HPSBUX02741 platforms HP-UX B.11.23 OR HP-UX B.11.31 AND filesets tests hpuxws22APCH32.APACHE version is less than B.2.2.15.11 OR hpuxws22APCH32.APACHE2 version is less than B.2.2.15.11 OR hpuxws22APCH32.AUTH_LDAP version is less than B.2.2.15.11 OR hpuxws22APCH32.AUTH_LDAP2 version is less than B.2.2.15.11 OR hpuxws22APCH32.MOD_JK version is less than B.2.2.15.11 OR hpuxws22APCH32.MOD_JK2 version is less than B.2.2.15.11 OR hpuxws22APCH32.MOD_PERL version is less than B.2.2.15.11 OR hpuxws22APCH32.MOD_PERL2 version is less than B.2.2.15.11 OR hpuxws22APCH32.PHP version is less than B.2.2.15.11 OR hpuxws22APCH32.PHP2 version is less than B.2.2.15.11 OR hpuxws22APCH32.WEBPROXY version is less than B.2.2.15.11
BACK