Oval Definition:oval:org.mitre.oval:def:21761
Revision Date:2014-02-24Version:127
Title:RHSA-2011:1423: php53 and php security update (Moderate)
Description:crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CESA-2011:1423
CVE-2011-0708
CVE-2011-1148
CVE-2011-1466
CVE-2011-1468
CVE-2011-1469
CVE-2011-1471
CVE-2011-1938
CVE-2011-2202
CVE-2011-2483
RHSA-2011:1423-01
Platform(s):CentOS Linux 5
CentOS Linux 6
Red Hat Enterprise Linux 5
Red Hat Enterprise Linux 6
Product(s):php
php53
Definition Synopsis
  • Operation system section
  • Redhat 5 or Centos 5 release
  • The operating system installed on the system is Red Hat Enterprise Linux 5
  • OR The operating system installed on the system is CentOS Linux 5.x
  • AND Packages section
  • php53-cli is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-pdo is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-mbstring is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-pspell is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-imap is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-devel is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-xml is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-ldap is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-soap is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-process is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-bcmath is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-snmp is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-dba is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-mysql is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-odbc is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-intl is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-gd is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-common is earlier than 0:5.3.3-1.el5_7.3
  • OR php53 is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-xmlrpc is earlier than 0:5.3.3-1.el5_7.3
  • OR php53-pgsql is earlier than 0:5.3.3-1.el5_7.3
  • Operation system section
  • The operating system installed on the system is Red Hat Enterprise Linux 6
  • AND Packages section
  • php-pdo is earlier than 0:5.3.3-3.el6_1.3
  • OR php-common is earlier than 0:5.3.3-3.el6_1.3
  • OR php-enchant is earlier than 0:5.3.3-3.el6_1.3
  • OR php-embedded is earlier than 0:5.3.3-3.el6_1.3
  • OR php-xmlrpc is earlier than 0:5.3.3-3.el6_1.3
  • OR php-snmp is earlier than 0:5.3.3-3.el6_1.3
  • OR php-pgsql is earlier than 0:5.3.3-3.el6_1.3
  • OR php-devel is earlier than 0:5.3.3-3.el6_1.3
  • OR php-recode is earlier than 0:5.3.3-3.el6_1.3
  • OR php is earlier than 0:5.3.3-3.el6_1.3
  • OR php-odbc is earlier than 0:5.3.3-3.el6_1.3
  • OR php-gd is earlier than 0:5.3.3-3.el6_1.3
  • OR php-imap is earlier than 0:5.3.3-3.el6_1.3
  • OR php-tidy is earlier than 0:5.3.3-3.el6_1.3
  • OR php-soap is earlier than 0:5.3.3-3.el6_1.3
  • OR php-mysql is earlier than 0:5.3.3-3.el6_1.3
  • OR php-intl is earlier than 0:5.3.3-3.el6_1.3
  • OR php-bcmath is earlier than 0:5.3.3-3.el6_1.3
  • OR php-process is earlier than 0:5.3.3-3.el6_1.3
  • OR php-zts is earlier than 0:5.3.3-3.el6_1.3
  • OR php-ldap is earlier than 0:5.3.3-3.el6_1.3
  • OR php-mbstring is earlier than 0:5.3.3-3.el6_1.3
  • OR php-dba is earlier than 0:5.3.3-3.el6_1.3
  • OR php-cli is earlier than 0:5.3.3-3.el6_1.3
  • OR php-xml is earlier than 0:5.3.3-3.el6_1.3
  • OR php-pspell is earlier than 0:5.3.3-3.el6_1.3
  • BACK