Description

Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."

References

• APPLE-APPLE-SA-2012-09-19-2
• BID-51954
• BID-54638
• CVE-2011-1398
• CVE-2012-0781
• CVE-2012-0831
• CVE-2012-2688
• DEBIAN-DSA-2527
• REDHAT-RHSA-2013:1307
• URL: http://oss.oracle.com/pipermail/el-errata/2013-February/003294.html
• XF-73125
• XF-77155

Solution

Related Vulnerabilities

• RHSA-2013:0514: php security, bug fix and enhancement update
• ELSA-2013-1814 Critical: Oracle Linux php security update
• PHP Vulnerability: CVE-2012-0831
• Alpine Linux: CVE-2012-2688: Multiple vulnerabilities in php < 5.3.15 may allow remote code execution
• FreeBSD: php -- potential overflow in _php_stream_scandir (CVE-2012-2688)
• Gentoo Linux: CVE-2011-1398: PHP: Multiple vulnerabilities
• OS X update for Note (CVE-2012-0831)
• SUSE Linux Security Vulnerability: CVE-2011-1398
• SUSE Linux Security Vulnerability: CVE-2012-0781
• DSA-2527-1 php5 -- several vulnerabilities
• RHSA-2013:1307: php53 security, bug fix and enhancement update
• Vulnerabilities deemed not relevant on Red Hat Enterprise Linux 5
• PHP Vulnerability: CVE-2012-0781
• OS X update for PHP (CVE-2012-2688)
• Cent OS: CVE-2012-0831: CESA-2013:0514 (php)
• FreeBSD: php -- multiple vulnerabilities (Multiple CVEs)
• RHSA-2012:1046: php security update
• DSA-2408-1 php5 -- several vulnerabilities
• ELSA-2013-1307 Moderate: Oracle Linux php53 security, bug fix and enhancement update
• USN-1481-1: PHP vulnerabilities
• Vulnerabilities deemed not relevant on Red Hat Enterprise Linux 4
• PHP Vulnerability: CVE-2012-2688
• Oracle Solaris 11: CVE-2012-2688: Vulnerability in PHP
• OS X update for Note (CVE-2012-2688)
• RHSA-2013:1814: php security update
• OS X update for PHP (CVE-2012-0831)
• SUSE Linux Security Vulnerability: CVE-2012-0831
• PHP Vulnerability: CVE-2011-1398
• FreeBSD: php5 -- header splitting attack via carriage-return character (CVE-2011-1398)
• SUSE Linux Security Vulnerability: CVE-2012-2688
• ELSA-2012-1046 Moderate: Oracle Linux php security update
• Gentoo Linux: CVE-2012-0831: PHP: Multiple vulnerabilities
• USN-1569-1: PHP vulnerabilities
• Gentoo Linux: CVE-2012-2688: PHP: Multiple vulnerabilities
• USN-1358-1: PHP vulnerabilities
• Amazon Linux AMI: Security patch for php (ALAS-2012-116) (CVE-2012-2688)
• SUSE Linux Security Advisory: SUSE-SU-2012:1033-1