Oval Definition:	oval:org.mitre.oval:def:29216
Revision Date: 2015-08-03 Version: 18 Title: HP-UX Apache Server Suite running Apache Tomcat or PHP, Remote Denial of Service (DoS) and Other Vulnerabilities Description: Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a ZIP archive that contains many entries, leading to a heap-based buffer overflow. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2015-2331 Platform(s): HP-UX 11 Product(s): Definition Synopsis HP-UX B.11.31 AND filesets test hpuxws22APCH32.APACHE version is less than B.2.2.29.01 OR hpuxws22APCH32.APACHE2 version is less than B.2.2.29.01 OR hpuxws22APCH32.AUTH_LDAP version is less than B.2.2.29.01 OR hpuxws22APCH32.AUTH_LDAP2 version is less than B.2.2.29.01 OR hpuxws22APCH32.MOD_JK version is less than B.2.2.29.01 OR hpuxws22APCH32.MOD_JK2 version is less than B.2.2.29.01 OR hpuxws22APCH32.MOD_PERL version is less than B.2.2.29.01 OR hpuxws22APCH32.MOD_PERL2 version is less than B.2.2.29.01 OR hpuxws22APCH32.PHP version is less than B.2.2.29.01 OR hpuxws22APCH32.PHP2 version is less than B.2.2.29.01 OR hpuxws22APCH32.WEBPROXY version is less than B.2.2.29.01 OR hpuxws22APCH32.WEBPROXY2 version is less than B.2.2.29.01 OR hpuxws22APACHE.APACHE version is less than B.2.2.29.01 OR hpuxws22APACHE.APACHE2 version is less than B.2.2.29.01 OR hpuxws22APACHE.AUTH_LDAP version is less than B.2.2.29.01 OR hpuxws22APACHE.AUTH_LDAP2 version is less than B.2.2.29.01 OR hpuxws22APACHE.MOD_JK version is less than B.2.2.29.01 OR hpuxws22APACHE.MOD_JK2 version is less than B.2.2.29.01 OR hpuxws22APACHE.MOD_PERL version is less than B.2.2.29.01 OR hpuxws22APACHE.MOD_PERL2 version is less than B.2.2.29.01 OR hpuxws22APACHE.PHP version is less than B.2.2.29.01 OR hpuxws22APACHE.PHP2 version is less than B.2.2.29.01 OR hpuxws22APACHE.WEBPROXY version is less than B.2.2.29.01 OR hpuxws22APACHE.WEBPROXY2 version is less than B.2.2.29.01 OR hpuxws22TOMCAT.TOMCAT version is less than C.6.0.43.01
BACK