Oval Definition:	oval:org.mitre.oval:def:21158
Revision Date: 2014-06-30 Version: 13 Title: RHSA-2013:1813: php53 and php security update (Critical) Description: The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter timestamps in X.509 certificates, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted certificate that is not properly handled by the openssl_x509_parse function. Family: unix Class: patch Status: ACCEPTED Reference(s): CESA-2013:1813 CVE-2013-6420 RHSA-2013:1813-00 Platform(s): CentOS Linux 5 CentOS Linux 6 Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 Product(s): php php53 Definition Synopsis Operation system section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x AND Packages section php53-intl is earlier than 0:5.3.3-22.el5_10 OR php53-pdo is earlier than 0:5.3.3-22.el5_10 OR php53-gd is earlier than 0:5.3.3-22.el5_10 OR php53 is earlier than 0:5.3.3-22.el5_10 OR php53-pspell is earlier than 0:5.3.3-22.el5_10 OR php53-common is earlier than 0:5.3.3-22.el5_10 OR php53-devel is earlier than 0:5.3.3-22.el5_10 OR php53-mysql is earlier than 0:5.3.3-22.el5_10 OR php53-process is earlier than 0:5.3.3-22.el5_10 OR php53-ldap is earlier than 0:5.3.3-22.el5_10 OR php53-cli is earlier than 0:5.3.3-22.el5_10 OR php53-bcmath is earlier than 0:5.3.3-22.el5_10 OR php53-dba is earlier than 0:5.3.3-22.el5_10 OR php53-mbstring is earlier than 0:5.3.3-22.el5_10 OR php53-snmp is earlier than 0:5.3.3-22.el5_10 OR php53-odbc is earlier than 0:5.3.3-22.el5_10 OR php53-pgsql is earlier than 0:5.3.3-22.el5_10 OR php53-xml is earlier than 0:5.3.3-22.el5_10 OR php53-imap is earlier than 0:5.3.3-22.el5_10 OR php53-xmlrpc is earlier than 0:5.3.3-22.el5_10 OR php53-soap is earlier than 0:5.3.3-22.el5_10 Operation system section Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 OR The operating system installed on the system is CentOS Linux 6.x AND Packages section php-common is earlier than 0:5.3.3-27.el6_5 OR php-process is earlier than 0:5.3.3-27.el6_5 OR php-snmp is earlier than 0:5.3.3-27.el6_5 OR php-pspell is earlier than 0:5.3.3-27.el6_5 OR php-odbc is earlier than 0:5.3.3-27.el6_5 OR php-mysql is earlier than 0:5.3.3-27.el6_5 OR php-devel is earlier than 0:5.3.3-27.el6_5 OR php-dba is earlier than 0:5.3.3-27.el6_5 OR php-fpm is earlier than 0:5.3.3-27.el6_5 OR php-zts is earlier than 0:5.3.3-27.el6_5 OR php-tidy is earlier than 0:5.3.3-27.el6_5 OR php-embedded is earlier than 0:5.3.3-27.el6_5 OR php-gd is earlier than 0:5.3.3-27.el6_5 OR php-bcmath is earlier than 0:5.3.3-27.el6_5 OR php-xmlrpc is earlier than 0:5.3.3-27.el6_5 OR php-intl is earlier than 0:5.3.3-27.el6_5 OR php-pgsql is earlier than 0:5.3.3-27.el6_5 OR php-cli is earlier than 0:5.3.3-27.el6_5 OR php is earlier than 0:5.3.3-27.el6_5 OR php-mbstring is earlier than 0:5.3.3-27.el6_5 OR php-pdo is earlier than 0:5.3.3-27.el6_5 OR php-imap is earlier than 0:5.3.3-27.el6_5 OR php-soap is earlier than 0:5.3.3-27.el6_5 OR php-recode is earlier than 0:5.3.3-27.el6_5 OR php-xml is earlier than 0:5.3.3-27.el6_5 OR php-ldap is earlier than 0:5.3.3-27.el6_5 OR php-enchant is earlier than 0:5.3.3-27.el6_5
BACK