CIA RESEARCH

Alerts

[CIA-1059-Alert] PHP 5.1.2 and Prior Multiple Vulnerabilities

Summary:

Multiple vulnerabilities exist in PHP prior to version 5.1.3. Sites running older versions of PHP should consider a security upgrade.

Technical Details:

PHP Version 5.1.2 and prior version are affected by multiple vulnerabilities. PHP version 5.1.3 was released to address the following security vulnerabilities:

• Disallow certain characters in session names.
• Buffer overflow inside the wordwrap() function.
• Prevent jumps to parent directory via the 2nd parameter of the tempnam() function.
• Enforce safe_mode for the source parameter of the copy() function.
• Fixed cross-site scripting inside the phpinfo() function.
• Fixed offset/length parameter validation inside the substr_compare() function.
• Fixed a heap corruption inside the session extension.
• Fixed a bug that would allow variable to survive unset().

Solution:

Upgrade to the lastest version of PHP.

CVE Reference:

CVE-2006-3016
CVE-2006-3017
CVE-2006-3018

SecurityTracker Number(s):

1016306

The following CVE Names are associated with these security issues:

Vendor URL:

www.php.net

About the Cenzic CIA Team:

Cenzic Intelligent Analysis (CIA) is Cenzic's research arm that focuses on continuous research for application vulnerabilities. Industry Research, Vulnerability assessment, penetration testing, and security testing - that's what Cenzic Intelligent Analysis Research is all about. Cenzic has dedicated experts whose sole job is to perform ongoing research to find not only common vulnerabilities but also vulnerabilities found in customer applications and make them available to our customers and to the community at large.

About Cenzic:

Cenzic provides Hailstorm® the revolutionary enterprise software suite for automated application security assessment and compliance that allows corporations and government organizations to dramatically improve the security of commercial and custom applications. Hailstorm enables security experts, QA professionals, and developers to work together to assess, analyze, and remediate applications for security vulnerabilities, and verify compliance with security policies. Benefits include reduced security risk and liability, lower development and testing costs, and faster time-to-market. Cenzic's customers are currently in the financial services and e-marketplaces sectors. For more information visit www.cenzic.com or call 1-866-4-CENZIC