Debian Security Advisory DSA 1283-1 (php5) Network Vulnerability

Summary

The remote host is missing an update to php5 announced via advisory DSA 1283-1.

Solution

The oldstable distribution (sarge) doesn't include php5. For the stable distribution (etch) these problems have been fixed in version 5.2.0-8+etch3. For the unstable distribution (sid) these problems have been fixed in version 5.2.0-11. We recommend that you upgrade your PHP packages. https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201283-1

Insight

For details on issues addressed in this update, please visit the referenced security advisories.

Severity

Classification

CVE	CVE-2007-1286, CVE-2007-1375, CVE-2007-1376, CVE-2007-1380, CVE-2007-1453, CVE-2007-1454, CVE-2007-1521, CVE-2007-1583, CVE-2007-1700, CVE-2007-1711, CVE-2007-1718, CVE-2007-1777, CVE-2007-1824, CVE-2007-1887, CVE-2007-1889, CVE-2007-1900

CVSS	Base Score: 7.8 AV:N/AC:L/Au:N/C:N/I:C/A:N

Related Vulnerabilities

Debian Security Advisory DSA 1011-1 (kernel-patch-vserver, util-vserver)
Debian Security Advisory DSA 059-1 (man-db)
Debian Security Advisory DSA 1029-1 (libphp-adodb)
Debian Security Advisory DSA 045-1 (ntp)
Debian Security Advisory DSA 003-1 (joe)

Take action and discover your vulnerabilities