7.5 - RHSA-2014:1767

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	php security update

Informations
Name	RHSA-2014:1767	First vendor Publication	2014-10-30
Vendor	RedHat	Last vendor Modification	2014-10-30
Severity (Vendor)	Important	Revision	01

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Problem Description:

Updated php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Client Optional (v. 7) - x86_64 Red Hat Enterprise Linux ComputeNode Optional (v. 7) - x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server (v. 7) - ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 7) - ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation (v. 7) - x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 7) - x86_64

3. Description:

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.

A buffer overflow flaw was found in the Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exif_thumbnail() function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application. (CVE-2014-3670)

An integer overflow flaw was found in the way custom objects were unserialized. Specially crafted input processed by the unserialize() function could cause a PHP application to crash. (CVE-2014-3669)

An out-of-bounds read flaw was found in the way the File Information (fileinfo) extension parsed Executable and Linkable Format (ELF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted ELF file. (CVE-2014-3710)

An out of bounds read flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash. (CVE-2014-3668)

The CVE-2014-3710 issue was discovered by Francisco Alonso of Red Hat Product Security.

All php users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the httpd daemon must be restarted for the update to take effect.

4. Solution:

Before applying this update, make sure all previously released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258

5. Bugs fixed (https://bugzilla.redhat.com/):

1154500 - CVE-2014-3669 php: integer overflow in unserialize() 1154502 - CVE-2014-3670 php: heap corruption issue in exif_thumbnail() 1154503 - CVE-2014-3668 php: xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime() 1155071 - CVE-2014-3710 file: out-of-bounds read in elf note headers

Original Source

Url : https://rhn.redhat.com/errata/RHSA-2014-1767.html

CWE : Common Weakness Enumeration

%	Id	Name
50 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
25 %	CWE-189	Numeric Errors (CWE/SANS Top 25)
25 %	CWE-20	Improper Input Validation

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:26893

Oval ID:	oval:org.mitre.oval:def:26893
Title:	ELSA-2014-1767 -- php security update (important)
Description:	[5.4.16-23.3] - fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710 [5.4.16-23.2] - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668 - core: fix integer overflow in unserialize() CVE-2014-3669 - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
Family:	unix	Class:	patch
Reference(s):	ELSA-2014-1767 CVE-2014-3668 CVE-2014-3669 CVE-2014-3670 CVE-2014-3710	Version:	3
Platform(s):	Oracle Linux 6 Oracle Linux 7	Product(s):	php
Definition Synopsis:
Oracle Linux 6 release section Oracle Linux 6.x Packages match section php is earlier than 0:5.3.3-40.el6_6 AND php-bcmath is earlier than 0:5.3.3-40.el6_6 AND php-cli is earlier than 0:5.3.3-40.el6_6 AND php-common is earlier than 0:5.3.3-40.el6_6 AND php-dba is earlier than 0:5.3.3-40.el6_6 AND php-devel is earlier than 0:5.3.3-40.el6_6 AND php-embedded is earlier than 0:5.3.3-40.el6_6 AND php-enchant is earlier than 0:5.3.3-40.el6_6 AND php-fpm is earlier than 0:5.3.3-40.el6_6 AND php-gd is earlier than 0:5.3.3-40.el6_6 AND php-imap is earlier than 0:5.3.3-40.el6_6 AND php-intl is earlier than 0:5.3.3-40.el6_6 AND php-ldap is earlier than 0:5.3.3-40.el6_6 AND php-mbstring is earlier than 0:5.3.3-40.el6_6 AND php-mysql is earlier than 0:5.3.3-40.el6_6 AND php-odbc is earlier than 0:5.3.3-40.el6_6 AND php-pdo is earlier than 0:5.3.3-40.el6_6 AND php-pgsql is earlier than 0:5.3.3-40.el6_6 AND php-process is earlier than 0:5.3.3-40.el6_6 AND php-pspell is earlier than 0:5.3.3-40.el6_6 AND php-recode is earlier than 0:5.3.3-40.el6_6 AND php-snmp is earlier than 0:5.3.3-40.el6_6 AND php-soap is earlier than 0:5.3.3-40.el6_6 AND php-tidy is earlier than 0:5.3.3-40.el6_6 AND php-xml is earlier than 0:5.3.3-40.el6_6 AND php-xmlrpc is earlier than 0:5.3.3-40.el6_6 AND php-zts is earlier than 0:5.3.3-40.el6_6 AND Oracle Linux 7 release section Oracle Linux 7.x Packages match section php is earlier than 0:5.4.16-23.el7_0.3 AND php-bcmath is earlier than 0:5.4.16-23.el7_0.3 AND php-cli is earlier than 0:5.4.16-23.el7_0.3 AND php-common is earlier than 0:5.4.16-23.el7_0.3 AND php-dba is earlier than 0:5.4.16-23.el7_0.3 AND php-devel is earlier than 0:5.4.16-23.el7_0.3 AND php-embedded is earlier than 0:5.4.16-23.el7_0.3 AND php-enchant is earlier than 0:5.4.16-23.el7_0.3 AND php-fpm is earlier than 0:5.4.16-23.el7_0.3 AND php-gd is earlier than 0:5.4.16-23.el7_0.3 AND php-intl is earlier than 0:5.4.16-23.el7_0.3 AND php-ldap is earlier than 0:5.4.16-23.el7_0.3 AND php-mbstring is earlier than 0:5.4.16-23.el7_0.3 AND php-mysql is earlier than 0:5.4.16-23.el7_0.3 AND php-mysqlnd is earlier than 0:5.4.16-23.el7_0.3 AND php-odbc is earlier than 0:5.4.16-23.el7_0.3 AND php-pdo is earlier than 0:5.4.16-23.el7_0.3 AND php-pgsql is earlier than 0:5.4.16-23.el7_0.3 AND php-process is earlier than 0:5.4.16-23.el7_0.3 AND php-pspell is earlier than 0:5.4.16-23.el7_0.3 AND php-recode is earlier than 0:5.4.16-23.el7_0.3 AND php-snmp is earlier than 0:5.4.16-23.el7_0.3 AND php-soap is earlier than 0:5.4.16-23.el7_0.3 AND php-xml is earlier than 0:5.4.16-23.el7_0.3 AND php-xmlrpc is earlier than 0:5.4.16-23.el7_0.3

Definition Id: oval:org.mitre.oval:def:26957

Oval ID:	oval:org.mitre.oval:def:26957
Title:	ELSA-2014-1768 -- php53 security update (important)
Description:	[5.3.3-26] - fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710 [5.3.3-25] - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668 - core: fix integer overflow in unserialize() CVE-2014-3669 - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
Family:	unix	Class:	patch
Reference(s):	ELSA-2014-1768 CVE-2014-3668 CVE-2014-3669 CVE-2014-3670 CVE-2014-3710	Version:	3
Platform(s):	Oracle Linux 5	Product(s):	php53
Definition Synopsis:
Oracle Linux 5.x Packages match section php53 is earlier than 0:5.3.3-26.el5_11 AND php53-bcmath is earlier than 0:5.3.3-26.el5_11 AND php53-cli is earlier than 0:5.3.3-26.el5_11 AND php53-common is earlier than 0:5.3.3-26.el5_11 AND php53-dba is earlier than 0:5.3.3-26.el5_11 AND php53-devel is earlier than 0:5.3.3-26.el5_11 AND php53-gd is earlier than 0:5.3.3-26.el5_11 AND php53-imap is earlier than 0:5.3.3-26.el5_11 AND php53-intl is earlier than 0:5.3.3-26.el5_11 AND php53-ldap is earlier than 0:5.3.3-26.el5_11 AND php53-mbstring is earlier than 0:5.3.3-26.el5_11 AND php53-mysql is earlier than 0:5.3.3-26.el5_11 AND php53-odbc is earlier than 0:5.3.3-26.el5_11 AND php53-pdo is earlier than 0:5.3.3-26.el5_11 AND php53-pgsql is earlier than 0:5.3.3-26.el5_11 AND php53-process is earlier than 0:5.3.3-26.el5_11 AND php53-pspell is earlier than 0:5.3.3-26.el5_11 AND php53-snmp is earlier than 0:5.3.3-26.el5_11 AND php53-soap is earlier than 0:5.3.3-26.el5_11 AND php53-xml is earlier than 0:5.3.3-26.el5_11 AND php53-xmlrpc is earlier than 0:5.3.3-26.el5_11

Definition Id: oval:org.mitre.oval:def:27852

Oval ID:	oval:org.mitre.oval:def:27852
Title:	DSA-3072-1 -- file security update
Description:	Francisco Alonso of Red Hat Product Security found an issue in the file utility: when checking ELF files, note headers are incorrectly checked, thus potentially allowing attackers to cause a denial of service (out-of-bounds read and application crash) by supplying a specially crafted ELF file.
Family:	unix	Class:	patch
Reference(s):	DSA-3072-1 CVE-2014-3710	Version:	3
Platform(s):	Debian GNU/Linux 7.0 Debian GNU/kFreeBSD 7.0	Product(s):	file
Definition Synopsis:
Debian 7 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND file is earlier than 0:5.11-2+deb7u6

Definition Id: oval:org.mitre.oval:def:27996

Oval ID:	oval:org.mitre.oval:def:27996
Title:	DSA-3074-2 -- php5 regression update
Description:	Francisco Alonso of Red Hat Product Security found an issue in the file utility, whose code is embedded in PHP, a general-purpose scripting language. When checking ELF files, note headers are incorrectly checked, thus potentially allowing attackers to cause a denial of service (out-of-bounds read and application crash) by supplying a specially crafted ELF file.
Family:	unix	Class:	patch
Reference(s):	DSA-3074-2 CVE-2014-3710	Version:	3
Platform(s):	Debian GNU/Linux 7.0 Debian GNU/kFreeBSD 7.0	Product(s):	php5
Definition Synopsis:
Debian 7 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND php5 is earlier than 0:5.4.35-0+deb7u1

Definition Id: oval:org.mitre.oval:def:28030

Oval ID:	oval:org.mitre.oval:def:28030
Title:	RHSA-2014:1767 -- php security update (Important)
Description:	PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A buffer overflow flaw was found in the Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exif_thumbnail() function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application. (CVE-2014-3670) An integer overflow flaw was found in the way custom objects were unserialized. Specially crafted input processed by the unserialize() function could cause a PHP application to crash. (CVE-2014-3669) An out-of-bounds read flaw was found in the way the File Information (fileinfo) extension parsed Executable and Linkable Format (ELF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted ELF file. (CVE-2014-3710) An out of bounds read flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash. (CVE-2014-3668) The CVE-2014-3710 issue was discovered by Francisco Alonso of Red Hat Product Security. All php users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the httpd daemon must be restarted for the update to take effect.
Family:	unix	Class:	patch
Reference(s):	RHSA-2014:1767 CESA-2014:1767-CentOS 6 CESA-2014:1767-CentOS 7 CVE-2014-3668 CVE-2014-3669 CVE-2014-3670 CVE-2014-3710	Version:	3
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 7 CentOS Linux 6 CentOS Linux 7	Product(s):	php
Definition Synopsis:
Red Hat Enterprise Linux 6 and CentOS Linux 6 release section Operation system section The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages match section php is earlier than 0:5.3.3-40.el6_6 AND php-bcmath is earlier than 0:5.3.3-40.el6_6 AND php-cli is earlier than 0:5.3.3-40.el6_6 AND php-common is earlier than 0:5.3.3-40.el6_6 AND php-dba is earlier than 0:5.3.3-40.el6_6 AND php-devel is earlier than 0:5.3.3-40.el6_6 AND php-embedded is earlier than 0:5.3.3-40.el6_6 AND php-enchant is earlier than 0:5.3.3-40.el6_6 AND php-fpm is earlier than 0:5.3.3-40.el6_6 AND php-gd is earlier than 0:5.3.3-40.el6_6 AND php-imap is earlier than 0:5.3.3-40.el6_6 AND php-intl is earlier than 0:5.3.3-40.el6_6 AND php-ldap is earlier than 0:5.3.3-40.el6_6 AND php-mbstring is earlier than 0:5.3.3-40.el6_6 AND php-mysql is earlier than 0:5.3.3-40.el6_6 AND php-odbc is earlier than 0:5.3.3-40.el6_6 AND php-pdo is earlier than 0:5.3.3-40.el6_6 AND php-pgsql is earlier than 0:5.3.3-40.el6_6 AND php-process is earlier than 0:5.3.3-40.el6_6 AND php-pspell is earlier than 0:5.3.3-40.el6_6 AND php-recode is earlier than 0:5.3.3-40.el6_6 AND php-snmp is earlier than 0:5.3.3-40.el6_6 AND php-soap is earlier than 0:5.3.3-40.el6_6 AND php-tidy is earlier than 0:5.3.3-40.el6_6 AND php-xml is earlier than 0:5.3.3-40.el6_6 AND php-xmlrpc is earlier than 0:5.3.3-40.el6_6 AND php-zts is earlier than 0:5.3.3-40.el6_6 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 AND php-debuginfo is earlier than 0:5.3.3-40.el6_6 AND Red Hat Enterprise Linux 7 and CentOS Linux 7 release section Operation system section The operating system installed on the system is Red Hat Enterprise Linux 7 AND The operating system installed on the system is CentOS Linux 7.x Packages match section php is earlier than 0:5.4.16-23.el7_0.3 AND php-bcmath is earlier than 0:5.4.16-23.el7_0.3 AND php-cli is earlier than 0:5.4.16-23.el7_0.3 AND php-common is earlier than 0:5.4.16-23.el7_0.3 AND php-dba is earlier than 0:5.4.16-23.el7_0.3 AND php-devel is earlier than 0:5.4.16-23.el7_0.3 AND php-embedded is earlier than 0:5.4.16-23.el7_0.3 AND php-enchant is earlier than 0:5.4.16-23.el7_0.3 AND php-fpm is earlier than 0:5.4.16-23.el7_0.3 AND php-gd is earlier than 0:5.4.16-23.el7_0.3 AND php-intl is earlier than 0:5.4.16-23.el7_0.3 AND php-ldap is earlier than 0:5.4.16-23.el7_0.3 AND php-mbstring is earlier than 0:5.4.16-23.el7_0.3 AND php-mysql is earlier than 0:5.4.16-23.el7_0.3 AND php-mysqlnd is earlier than 0:5.4.16-23.el7_0.3 AND php-odbc is earlier than 0:5.4.16-23.el7_0.3 AND php-pdo is earlier than 0:5.4.16-23.el7_0.3 AND php-pgsql is earlier than 0:5.4.16-23.el7_0.3 AND php-process is earlier than 0:5.4.16-23.el7_0.3 AND php-pspell is earlier than 0:5.4.16-23.el7_0.3 AND php-recode is earlier than 0:5.4.16-23.el7_0.3 AND php-snmp is earlier than 0:5.4.16-23.el7_0.3 AND php-soap is earlier than 0:5.4.16-23.el7_0.3 AND php-xml is earlier than 0:5.4.16-23.el7_0.3 AND php-xmlrpc is earlier than 0:5.4.16-23.el7_0.3 AND Red Hat Enterprise Linux 7 release section The operating system installed on the system is Red Hat Enterprise Linux 7 AND php-debuginfo is earlier than 0:5.4.16-23.el7_0.3

Definition Id: oval:org.mitre.oval:def:28073

Oval ID:	oval:org.mitre.oval:def:28073
Title:	USN-2391-1 -- php5 vulnerabilities
Description:	Symeon Paraschoudis discovered that PHP incorrectly handled the mkgmtime function. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-3668">CVE-2014-3668</a>) Symeon Paraschoudis discovered that PHP incorrectly handled unserializing objects. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-3669">CVE-2014-3669</a>) Otto Ebeling discovered that PHP incorrectly handled the exif_thumbnail function. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-3670">CVE-2014-3670</a>) Francisco Alonso that PHP incorrectly handled ELF files in the fileinfo extension. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-3710">CVE-2014-3710</a>) It was discovered that PHP incorrectly handled NULL bytes when processing certain URLs with the curl functions. A remote attacker could possibly use this issue to bypass filename restrictions and obtain access to sensitive files. (No CVE number)
Family:	unix	Class:	patch
Reference(s):	USN-2391-1 CVE-2014-3668 CVE-2014-3669 CVE-2014-3670 CVE-2014-3710	Version:	5
Platform(s):	Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04	Product(s):	php5
Definition Synopsis:
Ubuntu 14.10 release section Ubuntu 14.10 is installed Packages match section php5-cli is earlier than 0:5.5.12+dfsg-2ubuntu4.1 AND php5-cgi is earlier than 0:5.5.12+dfsg-2ubuntu4.1 AND php5-xmlrpc is earlier than 0:5.5.12+dfsg-2ubuntu4.1 AND php5-curl is earlier than 0:5.5.12+dfsg-2ubuntu4.1 AND libapache2-mod-php5 is earlier than 0:5.5.12+dfsg-2ubuntu4.1 AND php5-fpm is earlier than 0:5.5.12+dfsg-2ubuntu4.1 AND Ubuntu 14.04 release section Ubuntu 14.04 is installed Packages match section php5-cli is earlier than 0:5.5.9+dfsg-1ubuntu4.5 AND php5-cgi is earlier than 0:5.5.9+dfsg-1ubuntu4.5 AND php5-xmlrpc is earlier than 0:5.5.9+dfsg-1ubuntu4.5 AND php5-curl is earlier than 0:5.5.9+dfsg-1ubuntu4.5 AND libapache2-mod-php5 is earlier than 0:5.5.9+dfsg-1ubuntu4.5 AND php5-fpm is earlier than 0:5.5.9+dfsg-1ubuntu4.5 AND Ubuntu 12.04 release section Ubuntu 12.04 is installed Packages match section php5-cli is earlier than 0:5.3.10-1ubuntu3.15 AND php5-cgi is earlier than 0:5.3.10-1ubuntu3.15 AND php5-xmlrpc is earlier than 0:5.3.10-1ubuntu3.15 AND php5-curl is earlier than 0:5.3.10-1ubuntu3.15 AND libapache2-mod-php5 is earlier than 0:5.3.10-1ubuntu3.15 AND php5-fpm is earlier than 0:5.3.10-1ubuntu3.15 AND Ubuntu 10.04 release section Ubuntu 10.04 is installed Packages match section php5-cli is earlier than 0:5.3.2-1ubuntu4.28 AND php5-cgi is earlier than 0:5.3.2-1ubuntu4.28 AND libapache2-mod-php5 is earlier than 0:5.3.2-1ubuntu4.28 AND php5-curl is earlier than 0:5.3.2-1ubuntu4.28 AND php5-xmlrpc is earlier than 0:5.3.2-1ubuntu4.28

Definition Id: oval:org.mitre.oval:def:28245

Oval ID:	oval:org.mitre.oval:def:28245
Title:	SUSE-SU-2014:1441-1 -- Security update for php53 (moderate)
Description:	This update fixes the following vulnerabilities in php: * Heap corruption issue in exif_thumbnail(). (CVE-2014-3670) * Integer overflow in unserialize(). (CVE-2014-3669) * Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime(). (CVE-2014-3668) Security Issues: * CVE-2014-3669 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3669> * CVE-2014-3670 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3670> * CVE-2014-3668 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3668>
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2014:1441-1 CVE-2014-3669 CVE-2014-3670 CVE-2014-3668	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11	Product(s):	php53
Definition Synopsis:
SUSE Linux Enterprise Server 11.x is installed Packages match section apache2-mod_php53 is earlier than 0:5.3.17-0.31.1 AND php53 is earlier than 0:5.3.17-0.31.1 AND php53-bcmath is earlier than 0:5.3.17-0.31.1 AND php53-bz2 is earlier than 0:5.3.17-0.31.1 AND php53-calendar is earlier than 0:5.3.17-0.31.1 AND php53-ctype is earlier than 0:5.3.17-0.31.1 AND php53-curl is earlier than 0:5.3.17-0.31.1 AND php53-dba is earlier than 0:5.3.17-0.31.1 AND php53-dom is earlier than 0:5.3.17-0.31.1 AND php53-exif is earlier than 0:5.3.17-0.31.1 AND php53-fastcgi is earlier than 0:5.3.17-0.31.1 AND php53-fileinfo is earlier than 0:5.3.17-0.31.1 AND php53-ftp is earlier than 0:5.3.17-0.31.1 AND php53-gd is earlier than 0:5.3.17-0.31.1 AND php53-gettext is earlier than 0:5.3.17-0.31.1 AND php53-gmp is earlier than 0:5.3.17-0.31.1 AND php53-iconv is earlier than 0:5.3.17-0.31.1 AND php53-intl is earlier than 0:5.3.17-0.31.1 AND php53-json is earlier than 0:5.3.17-0.31.1 AND php53-ldap is earlier than 0:5.3.17-0.31.1 AND php53-mbstring is earlier than 0:5.3.17-0.31.1 AND php53-mcrypt is earlier than 0:5.3.17-0.31.1 AND php53-mysql is earlier than 0:5.3.17-0.31.1 AND php53-odbc is earlier than 0:5.3.17-0.31.1 AND php53-openssl is earlier than 0:5.3.17-0.31.1 AND php53-pcntl is earlier than 0:5.3.17-0.31.1 AND php53-pdo is earlier than 0:5.3.17-0.31.1 AND php53-pear is earlier than 0:5.3.17-0.31.1 AND php53-pgsql is earlier than 0:5.3.17-0.31.1 AND php53-pspell is earlier than 0:5.3.17-0.31.1 AND php53-shmop is earlier than 0:5.3.17-0.31.1 AND php53-snmp is earlier than 0:5.3.17-0.31.1 AND php53-soap is earlier than 0:5.3.17-0.31.1 AND php53-suhosin is earlier than 0:5.3.17-0.31.1 AND php53-sysvmsg is earlier than 0:5.3.17-0.31.1 AND php53-sysvsem is earlier than 0:5.3.17-0.31.1 AND php53-sysvshm is earlier than 0:5.3.17-0.31.1 AND php53-tokenizer is earlier than 0:5.3.17-0.31.1 AND php53-wddx is earlier than 0:5.3.17-0.31.1 AND php53-xmlreader is earlier than 0:5.3.17-0.31.1 AND php53-xmlrpc is earlier than 0:5.3.17-0.31.1 AND php53-xmlwriter is earlier than 0:5.3.17-0.31.1 AND php53-xsl is earlier than 0:5.3.17-0.31.1 AND php53-zip is earlier than 0:5.3.17-0.31.1 AND php53-zlib is earlier than 0:5.3.17-0.31.1

Definition Id: oval:org.mitre.oval:def:28293

Oval ID:	oval:org.mitre.oval:def:28293
Title:	DSA-3064-1 -- php5 security update
Description:	Several vulnerabilities were found in PHP, a general-purpose scripting language commonly used for web application development. It has been decided to follow the stable 5.4.x releases for the Wheezy PHP packages. Consequently the vulnerabilities are addressed by upgrading PHP to a new upstream version 5.4.34, which includes additional bug fixes, new features and possibly incompatible changes. Please refer to the upstream changelog for more information.
Family:	unix	Class:	patch
Reference(s):	DSA-3064-1 CVE-2013-7345 CVE-2014-3668 CVE-2014-3669 CVE-2014-3670	Version:	3
Platform(s):	Debian GNU/Linux 7.0 Debian GNU/kFreeBSD 7.0	Product(s):	php5
Definition Synopsis:
Debian 7 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND php5 is earlier than 0:5.4.34-0+deb7u1

Definition Id: oval:org.mitre.oval:def:28300

Oval ID:	oval:org.mitre.oval:def:28300
Title:	DEPRECATED: DSA-3074-1 -- php5 security update
Description:	Francisco Alonso of Red Hat Product Security found an issue in the file utility, whose code is embedded in PHP, a general-purpose scripting language. When checking ELF files, note headers are incorrectly checked, thus potentially allowing attackers to cause a denial of service (out-of-bounds read and application crash) by supplying a specially crafted ELF file.
Family:	unix	Class:	patch
Reference(s):	DSA-3074-1 CVE-2014-3710	Version:	4
Platform(s):	Debian GNU/Linux 7.0 Debian GNU/kFreeBSD 7.0	Product(s):	php5
Definition Synopsis:
Debian 7 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND php5 is earlier than 0:5.4.35-0+deb7u1

Definition Id: oval:org.mitre.oval:def:28326

Oval ID:	oval:org.mitre.oval:def:28326
Title:	RHSA-2014:1768 -- php53 security update (Important)
Description:	PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A buffer overflow flaw was found in the Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exif_thumbnail() function to crash or, possibly, execute arbitrary code with the privileges of the user running that PHP application. (CVE-2014-3670) An integer overflow flaw was found in the way custom objects were unserialized. Specially crafted input processed by the unserialize() function could cause a PHP application to crash. (CVE-2014-3669) An out-of-bounds read flaw was found in the way the File Information (fileinfo) extension parsed Executable and Linkable Format (ELF) files. A remote attacker could use this flaw to crash a PHP application using fileinfo via a specially crafted ELF file. (CVE-2014-3710) An out of bounds read flaw was found in the way the xmlrpc extension parsed dates in the ISO 8601 format. A specially crafted XML-RPC request or response could possibly cause a PHP application to crash. (CVE-2014-3668) The CVE-2014-3710 issue was discovered by Francisco Alonso of Red Hat Product Security. All php53 users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the updated packages, the httpd daemon must be restarted for the update to take effect.
Family:	unix	Class:	patch
Reference(s):	RHSA-2014:1768 CESA-2014:1768 CVE-2014-3668 CVE-2014-3669 CVE-2014-3670 CVE-2014-3710	Version:	3
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	php53
Definition Synopsis:
Red Hat Enterprise Linux 5 and CentOS Linux 5 release section Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages match section php53 is earlier than 0:5.3.3-26.el5_11 AND php53-bcmath is earlier than 0:5.3.3-26.el5_11 AND php53-cli is earlier than 0:5.3.3-26.el5_11 AND php53-common is earlier than 0:5.3.3-26.el5_11 AND php53-dba is earlier than 0:5.3.3-26.el5_11 AND php53-devel is earlier than 0:5.3.3-26.el5_11 AND php53-gd is earlier than 0:5.3.3-26.el5_11 AND php53-imap is earlier than 0:5.3.3-26.el5_11 AND php53-intl is earlier than 0:5.3.3-26.el5_11 AND php53-ldap is earlier than 0:5.3.3-26.el5_11 AND php53-mbstring is earlier than 0:5.3.3-26.el5_11 AND php53-mysql is earlier than 0:5.3.3-26.el5_11 AND php53-odbc is earlier than 0:5.3.3-26.el5_11 AND php53-pdo is earlier than 0:5.3.3-26.el5_11 AND php53-pgsql is earlier than 0:5.3.3-26.el5_11 AND php53-process is earlier than 0:5.3.3-26.el5_11 AND php53-pspell is earlier than 0:5.3.3-26.el5_11 AND php53-snmp is earlier than 0:5.3.3-26.el5_11 AND php53-soap is earlier than 0:5.3.3-26.el5_11 AND php53-xml is earlier than 0:5.3.3-26.el5_11 AND php53-xmlrpc is earlier than 0:5.3.3-26.el5_11 AND Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 AND php53-debuginfo is earlier than 0:5.3.3-26.el5_11

Definition Id: oval:org.mitre.oval:def:28466

Oval ID:	oval:org.mitre.oval:def:28466
Title:	SUSE-SU-2014:1555-1 -- Security update for file (moderate)
Description:	file was updated to fix one security issue. This security issue was fixed: - Out-of-bounds read in elf note headers (CVE-2014-3710). This non-security issues was fixed: - Correctly identify GDBM files created by libgdbm4 (bnc#888308).
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2014:1555-1 CVE-2014-3710	Version:	3
Platform(s):	SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Desktop 12	Product(s):	file
Definition Synopsis:
SUSE Linux Enterprise Server 12 and SUSE Linux Enterprise Desktop 12 release section Operation system section SUSE Linux Enterprise Server 12 is installed AND SUSE Linux Enterprise Desktop 12 is installed Packages match section libmagic1-32bit is earlier than 0:5.19-5.2 AND libmagic1-debuginfo-32bit is earlier than 0:5.19-5.2 AND SUSE Linux Enterprise Desktop 12 release section SUSE Linux Enterprise Desktop 12 is installed Packages match section file is earlier than 0:5.19-5.2 AND file-debuginfo is earlier than 0:5.19-5.2 AND file-debugsource is earlier than 0:5.19-5.2 AND file-magic is earlier than 0:5.19-5.2 AND libmagic1 is earlier than 0:5.19-5.2 AND libmagic1-debuginfo is earlier than 0:5.19-5.2

Definition Id: oval:org.mitre.oval:def:28468

Oval ID:	oval:org.mitre.oval:def:28468
Title:	SUSE-SU-2014:1473-1 -- Security update for file (moderate)
Description:	file was updated to fix one security issue. * An out-of-bounds read flaw file's donote() function. This could possibly lead to file executable crash (CVE-2014-3710). Security Issues: * CVE-2014-3710 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3710>
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2014:1473-1 CVE-2014-3710	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Desktop 11	Product(s):	file
Definition Synopsis:
Operation system section SUSE Linux Enterprise Server 11.x is installed AND SUSE Linux Enterprise Desktop 11.x is installed Packages match section file is earlier than 0:4.24-43.27.1 AND file-32bit is earlier than 0:4.24-43.27.1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Php cpe:2.3:a:php:php:5.6.2:::::::* cpe:2.3:a:php:php:5.6.1:-:::::: cpe:2.3:a:php:php:5.6.1:rc1:::::: cpe:2.3:a:php:php:5.6.0:-:::::: cpe:2.3:a:php:php:5.6.0:alpha1:::::: cpe:2.3:a:php:php:5.6.0:beta2:::::: cpe:2.3:a:php:php:5.6.0:beta3:::::: cpe:2.3:a:php:php:5.6.0:beta4:::::: cpe:2.3:a:php:php:5.6.0:beta1:::::: cpe:2.3:a:php:php:5.6.0:alpha4:::::: cpe:2.3:a:php:php:5.6.0:alpha5:::::: cpe:2.3:a:php:php:5.6.0:alpha2:::::: cpe:2.3:a:php:php:5.6.0:alpha3:::::: cpe:2.3:a:php:php:5.6.0:rc1:::::: cpe:2.3:a:php:php:5.6.0:rc2:::::: cpe:2.3:a:php:php:5.6.0:rc3:::::: cpe:2.3:a:php:php:5.6.0:rc4:::::: cpe:2.3:a:php:php:5.5.9:-:::::: cpe:2.3:a:php:php:5.5.9:rc1:::::: cpe:2.3:a:php:php:5.5.8:-:::::: cpe:2.3:a:php:php:5.5.8:rc1:::::: cpe:2.3:a:php:php:5.5.7:-:::::: cpe:2.3:a:php:php:5.5.7:rc1:::::: cpe:2.3:a:php:php:5.5.6:-:::::: cpe:2.3:a:php:php:5.5.6:rc1:::::: cpe:2.3:a:php:php:5.5.5:-:::::: cpe:2.3:a:php:php:5.5.5:rc1:::::: cpe:2.3:a:php:php:5.5.43:::::::* cpe:2.3:a:php:php:5.5.4:-:::::: cpe:2.3:a:php:php:5.5.4:rc1:::::: cpe:2.3:a:php:php:5.5.38:::::::* cpe:2.3:a:php:php:5.5.37:::::::* cpe:2.3:a:php:php:5.5.36:::::::* cpe:2.3:a:php:php:5.5.35:::::::* cpe:2.3:a:php:php:5.5.34:::::::* cpe:2.3:a:php:php:5.5.33:::::::* cpe:2.3:a:php:php:5.5.32:::::::* cpe:2.3:a:php:php:5.5.31:::::::* cpe:2.3:a:php:php:5.5.30:::::::* cpe:2.3:a:php:php:5.5.3:::::::* cpe:2.3:a:php:php:5.5.29:::::::* cpe:2.3:a:php:php:5.5.28:::::::* cpe:2.3:a:php:php:5.5.27:-:::::: cpe:2.3:a:php:php:5.5.27:rc1:::::: cpe:2.3:a:php:php:5.5.26:-:::::: cpe:2.3:a:php:php:5.5.26:rc1:::::: cpe:2.3:a:php:php:5.5.25:-:::::: cpe:2.3:a:php:php:5.5.25:rc1:::::: cpe:2.3:a:php:php:5.5.24:-:::::: cpe:2.3:a:php:php:5.5.24:rc1:::::: cpe:2.3:a:php:php:5.5.23:-:::::: cpe:2.3:a:php:php:5.5.23:rc1:::::: cpe:2.3:a:php:php:5.5.22:-:::::: cpe:2.3:a:php:php:5.5.22:rc1:::::: cpe:2.3:a:php:php:5.5.21:-:::::: cpe:2.3:a:php:php:5.5.21:rc1:::::: cpe:2.3:a:php:php:5.5.20:-:::::: cpe:2.3:a:php:php:5.5.20:rc1:::::: cpe:2.3:a:php:php:5.5.2:-:::::: cpe:2.3:a:php:php:5.5.2:rc1:::::: cpe:2.3:a:php:php:5.5.19:-:::::: cpe:2.3:a:php:php:5.5.19:rc1:::::: cpe:2.3:a:php:php:5.5.18:-:::::: cpe:2.3:a:php:php:5.5.18:rc1:::::: cpe:2.3:a:php:php:5.5.17:-:::::: cpe:2.3:a:php:php:5.5.17:rc1:::::: cpe:2.3:a:php:php:5.5.16:-:::::: cpe:2.3:a:php:php:5.5.16:rc1:::::: cpe:2.3:a:php:php:5.5.15:-:::::: cpe:2.3:a:php:php:5.5.15:rc1:::::: cpe:2.3:a:php:php:5.5.14:-:::::: cpe:2.3:a:php:php:5.5.14:rc1:::::: cpe:2.3:a:php:php:5.5.13:-:::::: cpe:2.3:a:php:php:5.5.13:rc1:::::: cpe:2.3:a:php:php:5.5.12:-:::::: cpe:2.3:a:php:php:5.5.12:rc1:::::: cpe:2.3:a:php:php:5.5.11:-:::::: cpe:2.3:a:php:php:5.5.11:rc1:::::: cpe:2.3:a:php:php:5.5.10:-:::::: cpe:2.3:a:php:php:5.5.10:rc1:::::: cpe:2.3:a:php:php:5.5.1:::::::* cpe:2.3:a:php:php:5.5.0:alpha1:::::: cpe:2.3:a:php:php:5.5.0:beta4:::::: cpe:2.3:a:php:php:5.5.0:alpha6:::::: cpe:2.3:a:php:php:5.5.0:alpha2:::::: cpe:2.3:a:php:php:5.5.0:alpha5:::::: cpe:2.3:a:php:php:5.5.0:beta3:::::: cpe:2.3:a:php:php:5.5.0:beta2:::::: cpe:2.3:a:php:php:5.5.0:rc1:::::: cpe:2.3:a:php:php:5.5.0:alpha4:::::: cpe:2.3:a:php:php:5.5.0:beta1:::::: cpe:2.3:a:php:php:5.5.0:alpha3:::::: cpe:2.3:a:php:php:5.5.0:rc2:::::: cpe:2.3:a:php:php:5.5.0:-:::::: cpe:2.3:a:php:php:5.5.0:rc3:::::: cpe:2.3:a:php:php:5.4.9:-:::::: cpe:2.3:a:php:php:5.4.9:rc1:::::: cpe:2.3:a:php:php:5.4.8:-:::::: cpe:2.3:a:php:php:5.4.8:rc1:::::: cpe:2.3:a:php:php:5.4.7:-:::::: cpe:2.3:a:php:php:5.4.7:rc1:::::: cpe:2.3:a:php:php:5.4.6:-:::::: cpe:2.3:a:php:php:5.4.6:rc1:::::: cpe:2.3:a:php:php:5.4.5:-:::::: cpe:2.3:a:php:php:5.4.5:rc1:::::: cpe:2.3:a:php:php:5.4.45:::::::* cpe:2.3:a:php:php:5.4.44:::::::* cpe:2.3:a:php:php:5.4.43:::::::* cpe:2.3:a:php:php:5.4.42:::::::* cpe:2.3:a:php:php:5.4.41:::::::* cpe:2.3:a:php:php:5.4.40:::::::* cpe:2.3:a:php:php:5.4.4:-:::::: cpe:2.3:a:php:php:5.4.4:rc1:::::: cpe:2.3:a:php:php:5.4.4:rc2:::::: cpe:2.3:a:php:php:5.4.39:::::::* cpe:2.3:a:php:php:5.4.38:::::::* cpe:2.3:a:php:php:5.4.37:::::::* cpe:2.3:a:php:php:5.4.36:::::::* cpe:2.3:a:php:php:5.4.35:::::::* cpe:2.3:a:php:php:5.4.34:::::::* cpe:2.3:a:php:php:5.4.33:-:::::: cpe:2.3:a:php:php:5.4.33:rc1:::::: cpe:2.3:a:php:php:5.4.32:-:::::: cpe:2.3:a:php:php:5.4.32:rc1:::::: cpe:2.3:a:php:php:5.4.31:-:::::: cpe:2.3:a:php:php:5.4.31:rc1:::::: cpe:2.3:a:php:php:5.4.30:-:::::: cpe:2.3:a:php:php:5.4.30:rc1:::::: cpe:2.3:a:php:php:5.4.3:::::::* cpe:2.3:a:php:php:5.4.29:-:::::: cpe:2.3:a:php:php:5.4.29:rc1:::::: cpe:2.3:a:php:php:5.4.28:-:::::: cpe:2.3:a:php:php:5.4.28:rc1:::::: cpe:2.3:a:php:php:5.4.27:-:::::: cpe:2.3:a:php:php:5.4.27:rc1:::::: cpe:2.3:a:php:php:5.4.26:-:::::: cpe:2.3:a:php:php:5.4.26:rc1:::::: cpe:2.3:a:php:php:5.4.25:-:::::: cpe:2.3:a:php:php:5.4.25:rc1:::::: cpe:2.3:a:php:php:5.4.24:-:::::: cpe:2.3:a:php:php:5.4.24:rc1:::::: cpe:2.3:a:php:php:5.4.23:-:::::: cpe:2.3:a:php:php:5.4.23:rc1:::::: cpe:2.3:a:php:php:5.4.22:-:::::: cpe:2.3:a:php:php:5.4.22:rc1:::::: cpe:2.3:a:php:php:5.4.21:-:::::: cpe:2.3:a:php:php:5.4.21:rc1:::::: cpe:2.3:a:php:php:5.4.20:-:::::: cpe:2.3:a:php:php:5.4.20:rc1:::::: cpe:2.3:a:php:php:5.4.2:::::::* cpe:2.3:a:php:php:5.4.19:::::::* cpe:2.3:a:php:php:5.4.18:-:::::: cpe:2.3:a:php:php:5.4.18:rc1:::::: cpe:2.3:a:php:php:5.4.18:rc2:::::: cpe:2.3:a:php:php:5.4.17:-:::::: cpe:2.3:a:php:php:5.4.17:rc1:::::: cpe:2.3:a:php:php:5.4.16:rc1:::::: cpe:2.3:a:php:php:5.4.16:-:::::: cpe:2.3:a:php:php:5.4.15:rc1:::::: cpe:2.3:a:php:php:5.4.15:-:::::: cpe:2.3:a:php:php:5.4.14:rc1:::::: cpe:2.3:a:php:php:5.4.14:-:::::: cpe:2.3:a:php:php:5.4.13:rc1:::::: cpe:2.3:a:php:php:5.4.13:-:::::: cpe:2.3:a:php:php:5.4.12:rc2:::::: cpe:2.3:a:php:php:5.4.12:rc1:::::: cpe:2.3:a:php:php:5.4.12:-:::::: cpe:2.3:a:php:php:5.4.11:-:::::: cpe:2.3:a:php:php:5.4.11:rc1:::::: cpe:2.3:a:php:php:5.4.10:-:::::: cpe:2.3:a:php:php:5.4.10:rc1:::::: cpe:2.3:a:php:php:5.4.1:::::::* cpe:2.3:a:php:php:5.4.1:rc1:::::: cpe:2.3:a:php:php:5.4.1:rc2:::::: cpe:2.3:a:php:php:5.4.0:beta2:::::: cpe:2.3:a:php:php:5.4.0:beta2:32-bit:::::* cpe:2.3:a:php:php:5.4.0:rc2:::::: cpe:2.3:a:php:php:5.4.0:-:::::: cpe:2.3:a:php:php:5.4.0:alpha1:::::: cpe:2.3:a:php:php:5.4.0:alpha2:::::: cpe:2.3:a:php:php:5.4.0:alpha3:::::: cpe:2.3:a:php:php:5.4.0:beta1:::::: cpe:2.3:a:php:php:5.4.0:rc1:::::: cpe:2.3:a:php:php:5.4.0:rc3:::::: cpe:2.3:a:php:php:5.4.0:rc4:::::: cpe:2.3:a:php:php:5.4.0:rc5:::::: cpe:2.3:a:php:php:5.4.0:rc6:::::: cpe:2.3:a:php:php:5.4.0:rc7:::::: cpe:2.3:a:php:php:5.4.0:rc8:::::: cpe:2.3:a:php:php:5.3.9:-:::::: cpe:2.3:a:php:php:5.3.9:rc1:::::: cpe:2.3:a:php:php:5.3.9:rc2:::::: cpe:2.3:a:php:php:5.3.9:rc3:::::: cpe:2.3:a:php:php:5.3.9:rc4:::::: cpe:2.3:a:php:php:5.3.8:::::::* cpe:2.3:a:php:php:5.3.7:-:::::: cpe:2.3:a:php:php:5.3.7:rc1:::::: cpe:2.3:a:php:php:5.3.7:rc2:::::: cpe:2.3:a:php:php:5.3.7:rc3:::::: cpe:2.3:a:php:php:5.3.7:rc4:::::: cpe:2.3:a:php:php:5.3.7:rc5:::::: cpe:2.3:a:php:php:5.3.6:::::::* cpe:2.3:a:php:php:5.3.6:rc1:::::: cpe:2.3:a:php:php:5.3.6:rc2:::::: cpe:2.3:a:php:php:5.3.6:rc3:::::: cpe:2.3:a:php:php:5.3.5:::::::* cpe:2.3:a:php:php:5.3.4:-:::::: cpe:2.3:a:php:php:5.3.4:rc1:::::: cpe:2.3:a:php:php:5.3.4:rc2:::::: cpe:2.3:a:php:php:5.3.3:-:::::: cpe:2.3:a:php:php:5.3.3:rc1:::::: cpe:2.3:a:php:php:5.3.3:rc2:::::: cpe:2.3:a:php:php:5.3.3:rc3:::::: cpe:2.3:a:php:php:5.3.29:-:::::: cpe:2.3:a:php:php:5.3.29:rc1:::::: cpe:2.3:a:php:php:5.3.28:::::::* cpe:2.3:a:php:php:5.3.27:-:::::: cpe:2.3:a:php:php:5.3.27:rc1:::::: cpe:2.3:a:php:php:5.3.26:-:::::: cpe:2.3:a:php:php:5.3.26:rc1:::::: cpe:2.3:a:php:php:5.3.25:-:::::: cpe:2.3:a:php:php:5.3.25:rc1:::::: cpe:2.3:a:php:php:5.3.24:-:::::: cpe:2.3:a:php:php:5.3.24:rc1:::::: cpe:2.3:a:php:php:5.3.23:-:::::: cpe:2.3:a:php:php:5.3.23:rc1:::::: cpe:2.3:a:php:php:5.3.22:-:::::: cpe:2.3:a:php:php:5.3.22:rc1:::::: cpe:2.3:a:php:php:5.3.22:rc2:::::: cpe:2.3:a:php:php:5.3.21:-:::::: cpe:2.3:a:php:php:5.3.21:rc1:::::: cpe:2.3:a:php:php:5.3.20:-:::::: cpe:2.3:a:php:php:5.3.20:rc1:::::: cpe:2.3:a:php:php:5.3.2:-:::::: cpe:2.3:a:php:php:5.3.2:rc1:::::: cpe:2.3:a:php:php:5.3.2:rc2:::::: cpe:2.3:a:php:php:5.3.2:rc3:::::: cpe:2.3:a:php:php:5.3.19:-:::::: cpe:2.3:a:php:php:5.3.19:rc1:::::: cpe:2.3:a:php:php:5.3.18:-:::::: cpe:2.3:a:php:php:5.3.18:rc1:::::: cpe:2.3:a:php:php:5.3.17:::::::* cpe:2.3:a:php:php:5.3.16:::::::* cpe:2.3:a:php:php:5.3.15:-:::::: cpe:2.3:a:php:php:5.3.15:rc1:::::: cpe:2.3:a:php:php:5.3.14:-:::::: cpe:2.3:a:php:php:5.3.14:rc1:::::: cpe:2.3:a:php:php:5.3.14:rc2:::::: cpe:2.3:a:php:php:5.3.13:::::::* cpe:2.3:a:php:php:5.3.12:::::::* cpe:2.3:a:php:php:5.3.11:-:::::: cpe:2.3:a:php:php:5.3.11:rc1:::::: cpe:2.3:a:php:php:5.3.11:rc2:::::: cpe:2.3:a:php:php:5.3.10:::::::* cpe:2.3:a:php:php:5.3.1:-:::::: cpe:2.3:a:php:php:5.3.1:rc1:::::: cpe:2.3:a:php:php:5.3.1:rc2:::::: cpe:2.3:a:php:php:5.3.1:rc3:::::: cpe:2.3:a:php:php:5.3.1:rc4:::::: cpe:2.3:a:php:php:5.3.0:-:::::: cpe:2.3:a:php:php:5.3.0:alpha1:::::: cpe:2.3:a:php:php:5.3.0:alpha2:::::: cpe:2.3:a:php:php:5.3.0:alpha3:::::: cpe:2.3:a:php:php:5.3.0:beta1:::::: cpe:2.3:a:php:php:5.3.0:rc1:::::: cpe:2.3:a:php:php:5.3.0:rc2:::::: cpe:2.3:a:php:php:5.3.0:rc3:::::: cpe:2.3:a:php:php:5.3.0:rc4:::::: cpe:2.3:a:php:php:5.2.9:-:::::: cpe:2.3:a:php:php:5.2.9:rc1:::::: cpe:2.3:a:php:php:5.2.9:rc2:::::: cpe:2.3:a:php:php:5.2.9:rc3:::::: cpe:2.3:a:php:php:5.2.8:::::::* cpe:2.3:a:php:php:5.2.7:-:::::: cpe:2.3:a:php:php:5.2.7:rc1:::::: cpe:2.3:a:php:php:5.2.7:rc2:::::: cpe:2.3:a:php:php:5.2.7:rc3:::::: cpe:2.3:a:php:php:5.2.7:rc4:::::: cpe:2.3:a:php:php:5.2.7:rc5:::::: cpe:2.3:a:php:php:5.2.6:-:::::: cpe:2.3:a:php:php:5.2.6:rc1:::::: cpe:2.3:a:php:php:5.2.6:rc2:::::: cpe:2.3:a:php:php:5.2.6:rc3:::::: cpe:2.3:a:php:php:5.2.6:rc4:::::: cpe:2.3:a:php:php:5.2.6:rc5:::::: cpe:2.3:a:php:php:5.2.5:-:::::: cpe:2.3:a:php:php:5.2.5:rc1:::::: cpe:2.3:a:php:php:5.2.5:rc2:::::: cpe:2.3:a:php:php:5.2.4::windows::::: cpe:2.3:a:php:php:5.2.4:-:::::: cpe:2.3:a:php:php:5.2.4:rc1:::::: cpe:2.3:a:php:php:5.2.4:rc2:::::: cpe:2.3:a:php:php:5.2.4:rc3:::::: cpe:2.3:a:php:php:5.2.3:-:::::: cpe:2.3:a:php:php:5.2.3:rc1:::::: cpe:2.3:a:php:php:5.2.2:-:::::: cpe:2.3:a:php:php:5.2.2:rc1:::::: cpe:2.3:a:php:php:5.2.2:rc2:::::: cpe:2.3:a:php:php:5.2.17:::::::* cpe:2.3:a:php:php:5.2.16:::::::* cpe:2.3:a:php:php:5.2.15:-:::::: cpe:2.3:a:php:php:5.2.15:rc1:::::: cpe:2.3:a:php:php:5.2.15:rc2:::::: cpe:2.3:a:php:php:5.2.14:-:::::: cpe:2.3:a:php:php:5.2.14:rc1:::::: cpe:2.3:a:php:php:5.2.14:rc2:::::: cpe:2.3:a:php:php:5.2.14:rc3:::::: cpe:2.3:a:php:php:5.2.13:-:::::: cpe:2.3:a:php:php:5.2.13:rc1:::::: cpe:2.3:a:php:php:5.2.13:rc2:::::: cpe:2.3:a:php:php:5.2.12:-:::::: cpe:2.3:a:php:php:5.2.12:rc1:::::: cpe:2.3:a:php:php:5.2.12:rc2:::::: cpe:2.3:a:php:php:5.2.12:rc3:::::: cpe:2.3:a:php:php:5.2.12:rc4:::::: cpe:2.3:a:php:php:5.2.11:-:::::: cpe:2.3:a:php:php:5.2.11:rc1:::::: cpe:2.3:a:php:php:5.2.11:rc2:::::: cpe:2.3:a:php:php:5.2.11:rc3:::::: cpe:2.3:a:php:php:5.2.10:-:::::: cpe:2.3:a:php:php:5.2.10:rc1:::::: cpe:2.3:a:php:php:5.2.10:rc2:::::: cpe:2.3:a:php:php:5.2.1:-:::::: cpe:2.3:a:php:php:5.2.1:rc1:::::: cpe:2.3:a:php:php:5.2.1:rc2:::::: cpe:2.3:a:php:php:5.2.1:rc3:::::: cpe:2.3:a:php:php:5.2.1:rc4:::::: cpe:2.3:a:php:php:5.2.0:::::::* cpe:2.3:a:php:php:5.2.0:rc1:::::: cpe:2.3:a:php:php:5.2.0:rc2:::::: cpe:2.3:a:php:php:5.2.0:rc3:::::: cpe:2.3:a:php:php:5.2.0:rc4:::::: cpe:2.3:a:php:php:5.2.0:rc5:::::: cpe:2.3:a:php:php:5.2.0:rc6:::::: cpe:2.3:a:php:php:5.1.6:::::::* cpe:2.3:a:php:php:5.1.5:-:::::: cpe:2.3:a:php:php:5.1.5:rc1:::::: cpe:2.3:a:php:php:5.1.4:::::::* cpe:2.3:a:php:php:5.1.3:::::::* cpe:2.3:a:php:php:5.1.3:rc1:::::: cpe:2.3:a:php:php:5.1.3:rc2:::::: cpe:2.3:a:php:php:5.1.3:rc3:::::: cpe:2.3:a:php:php:5.1.2:-:::::: cpe:2.3:a:php:php:5.1.2:rc1:::::: cpe:2.3:a:php:php:5.1.2:rc2:::::: cpe:2.3:a:php:php:5.1.1:::::::* cpe:2.3:a:php:php:5.1.0:-:::::: cpe:2.3:a:php:php:5.1.0:beta1:::::: cpe:2.3:a:php:php:5.1.0:beta2:::::: cpe:2.3:a:php:php:5.1.0:beta3:::::: cpe:2.3:a:php:php:5.1.0:rc1:::::: cpe:2.3:a:php:php:5.1.0:rc2:::::: cpe:2.3:a:php:php:5.1.0:rc2-pre:::::: cpe:2.3:a:php:php:5.1.0:rc3:::::: cpe:2.3:a:php:php:5.1.0:rc4:::::: cpe:2.3:a:php:php:5.1.0:rc5:::::: cpe:2.3:a:php:php:5.1.0:rc6:::::: cpe:2.3:a:php:php:5.0.5:-:::::: cpe:2.3:a:php:php:5.0.5:rc1:::::: cpe:2.3:a:php:php:5.0.5:rc2:::::: cpe:2.3:a:php:php:5.0.4:-:::::: cpe:2.3:a:php:php:5.0.4:rc1:::::: cpe:2.3:a:php:php:5.0.4:rc2:::::: cpe:2.3:a:php:php:5.0.3:-:::::: cpe:2.3:a:php:php:5.0.3:rc1:::::: cpe:2.3:a:php:php:5.0.3:rc2:::::: cpe:2.3:a:php:php:5.0.2:-:::::: cpe:2.3:a:php:php:5.0.2:rc1:::::: cpe:2.3:a:php:php:5.0.1:-:::::: cpe:2.3:a:php:php:5.0.1:beta1:::::: cpe:2.3:a:php:php:5.0.1:rc1:::::: cpe:2.3:a:php:php:5.0.1:rc2:::::: cpe:2.3:a:php:php:5.0.0:beta3:::::: cpe:2.3:a:php:php:5.0.0:rc3:::::: cpe:2.3:a:php:php:5.0.0:beta1:::::: cpe:2.3:a:php:php:5.0.0:beta4:::::: cpe:2.3:a:php:php:5.0.0:rc1:::::: cpe:2.3:a:php:php:5.0.0:beta2:::::: cpe:2.3:a:php:php:5.0.0:rc2:::::: cpe:2.3:a:php:php:5.0.0:-:::::: cpe:2.3:a:php:php:5.0:rc1:::::: cpe:2.3:a:php:php:5.0:rc3:::::: cpe:2.3:a:php:php:5.0:rc2:::::: cpe:2.3:a:php:php:5:::::::* cpe:2.3:a:php:php:4.4.9:-:::::: cpe:2.3:a:php:php:4.4.9:rc1:::::: cpe:2.3:a:php:php:4.4.8:-:::::: cpe:2.3:a:php:php:4.4.8:rc1:::::: cpe:2.3:a:php:php:4.4.7:-:::::: cpe:2.3:a:php:php:4.4.7:rc1:::::: cpe:2.3:a:php:php:4.4.6:-:::::: cpe:2.3:a:php:php:4.4.6:rc1:::::: cpe:2.3:a:php:php:4.4.5:-:::::: cpe:2.3:a:php:php:4.4.5:rc1:::::: cpe:2.3:a:php:php:4.4.5:rc2:::::: cpe:2.3:a:php:php:4.4.4:-:::::: cpe:2.3:a:php:php:4.4.4:rc1:::::: cpe:2.3:a:php:php:4.4.3:-:::::: cpe:2.3:a:php:php:4.4.3:rc1:::::: cpe:2.3:a:php:php:4.4.3:rc2:::::: cpe:2.3:a:php:php:4.4.2:-:::::: cpe:2.3:a:php:php:4.4.2:rc1:::::: cpe:2.3:a:php:php:4.4.2:rc2:::::: cpe:2.3:a:php:php:4.4.1:-:::::: cpe:2.3:a:php:php:4.4.1:rc1:::::: cpe:2.3:a:php:php:4.4.0:-:::::: cpe:2.3:a:php:php:4.4.0:rc1:::::: cpe:2.3:a:php:php:4.4.0:rc2:::::: cpe:2.3:a:php:php:4.3.9:::::::* cpe:2.3:a:php:php:4.3.9:rc1:::::: cpe:2.3:a:php:php:4.3.9:rc2:::::: cpe:2.3:a:php:php:4.3.9:rc3:::::: cpe:2.3:a:php:php:4.3.8:::::::* cpe:2.3:a:php:php:4.3.7:-:::::: cpe:2.3:a:php:php:4.3.7:rc1:::::: cpe:2.3:a:php:php:4.3.6:-:::::: cpe:2.3:a:php:php:4.3.6:rc1:::::: cpe:2.3:a:php:php:4.3.6:rc2:::::: cpe:2.3:a:php:php:4.3.6:rc3:::::: cpe:2.3:a:php:php:4.3.5:-:::::: cpe:2.3:a:php:php:4.3.5:rc1:::::: cpe:2.3:a:php:php:4.3.5:rc2:::::: cpe:2.3:a:php:php:4.3.5:rc3:::::: cpe:2.3:a:php:php:4.3.5:rc4:::::: cpe:2.3:a:php:php:4.3.4:-:::::: cpe:2.3:a:php:php:4.3.4:rc1:::::: cpe:2.3:a:php:php:4.3.4:rc2:::::: cpe:2.3:a:php:php:4.3.4:rc3:::::: cpe:2.3:a:php:php:4.3.3:-:::::: cpe:2.3:a:php:php:4.3.3:rc1:::::: cpe:2.3:a:php:php:4.3.3:rc2:::::: cpe:2.3:a:php:php:4.3.3:rc3:::::: cpe:2.3:a:php:php:4.3.3:rc4:::::: cpe:2.3:a:php:php:4.3.2:-:::::: cpe:2.3:a:php:php:4.3.2:rc1:::::: cpe:2.3:a:php:php:4.3.2:rc2:::::: cpe:2.3:a:php:php:4.3.2:rc3:::::: cpe:2.3:a:php:php:4.3.2:rc4:::::: cpe:2.3:a:php:php:4.3.11:-:::::: cpe:2.3:a:php:php:4.3.11:rc1:::::: cpe:2.3:a:php:php:4.3.11:rc2:::::: cpe:2.3:a:php:php:4.3.10:-:::::: cpe:2.3:a:php:php:4.3.10:rc1:::::: cpe:2.3:a:php:php:4.3.10:rc2:::::: cpe:2.3:a:php:php:4.3.1:::::::* cpe:2.3:a:php:php:4.3.0:-:::::: cpe:2.3:a:php:php:4.3.0:alpha1:::::: cpe:2.3:a:php:php:4.3.0:alpha2:::::: cpe:2.3:a:php:php:4.3.0:alpha3:::::: cpe:2.3:a:php:php:4.3.0:dev:::::: cpe:2.3:a:php:php:4.3.0:pre1:::::: cpe:2.3:a:php:php:4.3.0:pre2:::::: cpe:2.3:a:php:php:4.3.0:rc1:::::: cpe:2.3:a:php:php:4.3.0:rc2:::::: cpe:2.3:a:php:php:4.3.0:rc3:::::: cpe:2.3:a:php:php:4.3.0:rc4:::::: cpe:2.3:a:php:php:4.2.3:-:::::: cpe:2.3:a:php:php:4.2.3:rc1:::::: cpe:2.3:a:php:php:4.2.3:rc2:::::: cpe:2.3:a:php:php:4.2.2:::::::* cpe:2.3:a:php:php:4.2.1:-:::::: cpe:2.3:a:php:php:4.2.1:rc1:::::: cpe:2.3:a:php:php:4.2.1:rc2:::::: cpe:2.3:a:php:php:4.2.0:-:::::: cpe:2.3:a:php:php:4.2.0:rc1:::::: cpe:2.3:a:php:php:4.2.0:rc2:::::: cpe:2.3:a:php:php:4.2.0:rc3:::::: cpe:2.3:a:php:php:4.2.0:rc4:::::: cpe:2.3:a:php:php:4.2::dev::::: cpe:2.3:a:php:php:4.1.2:::::::* cpe:2.3:a:php:php:4.1.1:::::::* cpe:2.3:a:php:php:4.1.0:-:::::: cpe:2.3:a:php:php:4.1.0:rc1:::::: cpe:2.3:a:php:php:4.1.0:rc2:::::: cpe:2.3:a:php:php:4.1.0:rc3:::::: cpe:2.3:a:php:php:4.1.0:rc4:::::: cpe:2.3:a:php:php:4.1.0:rc5:::::: cpe:2.3:a:php:php:4.0.7:rc3:::::: cpe:2.3:a:php:php:4.0.7:rc2:::::: cpe:2.3:a:php:php:4.0.7:rc4:::::: cpe:2.3:a:php:php:4.0.7:rc1:::::: cpe:2.3:a:php:php:4.0.7:-:::::: cpe:2.3:a:php:php:4.0.6:-:::::: cpe:2.3:a:php:php:4.0.6:rc1:::::: cpe:2.3:a:php:php:4.0.6:rc2:::::: cpe:2.3:a:php:php:4.0.6:rc3:::::: cpe:2.3:a:php:php:4.0.6:rc4:::::: cpe:2.3:a:php:php:4.0.5:-:::::: cpe:2.3:a:php:php:4.0.5:rc1:::::: cpe:2.3:a:php:php:4.0.5:rc2:::::: cpe:2.3:a:php:php:4.0.5:rc3:::::: cpe:2.3:a:php:php:4.0.5:rc4:::::: cpe:2.3:a:php:php:4.0.5:rc5:::::: cpe:2.3:a:php:php:4.0.5:rc6:::::: cpe:2.3:a:php:php:4.0.5:rc7:::::: cpe:2.3:a:php:php:4.0.5:rc8:::::: cpe:2.3:a:php:php:4.0.4pl1:::::::* cpe:2.3:a:php:php:4.0.4:patch1:::::: cpe:2.3:a:php:php:4.0.4:-:::::: cpe:2.3:a:php:php:4.0.4:rc1:::::: cpe:2.3:a:php:php:4.0.4:rc2:::::: cpe:2.3:a:php:php:4.0.4:rc3:::::: cpe:2.3:a:php:php:4.0.4:rc4:::::: cpe:2.3:a:php:php:4.0.4:rc5:::::: cpe:2.3:a:php:php:4.0.4:rc6:::::: cpe:2.3:a:php:php:4.0.3:::::::* cpe:2.3:a:php:php:4.0.3:patch1:::::: cpe:2.3:a:php:php:4.0.3:rc1:::::: cpe:2.3:a:php:php:4.0.3:rc2:::::: cpe:2.3:a:php:php:4.0.2:::::::* cpe:2.3:a:php:php:4.0.2:rc1:::::: cpe:2.3:a:php:php:4.0.1:patch2:::::: cpe:2.3:a:php:php:4.0.1:patch1:::::: cpe:2.3:a:php:php:4.0.1:-:::::: cpe:2.3:a:php:php:4.0.1:rc:::::: cpe:2.3:a:php:php:4.0.1:rc2:::::: cpe:2.3:a:php:php:4.0.0:::::::* cpe:2.3:a:php:php:4.0:beta1:::::: cpe:2.3:a:php:php:4.0:beta2:::::: cpe:2.3:a:php:php:4.0:beta3:::::: cpe:2.3:a:php:php:4.0:beta4:::::: cpe:2.3:a:php:php:4.0:beta_4_patch1:::::: cpe:2.3:a:php:php:4.0:rc1:::::: cpe:2.3:a:php:php:4.0:rc2:::::: cpe:2.3:a:php:php:4.0:-:::::: cpe:2.3:a:php:php:4:::::::* cpe:2.3:a:php:php:3.0.9:::::::* cpe:2.3:a:php:php:3.0.8:::::::* cpe:2.3:a:php:php:3.0.7:::::::* cpe:2.3:a:php:php:3.0.6:::::::* cpe:2.3:a:php:php:3.0.5:::::::* cpe:2.3:a:php:php:3.0.4:::::::* cpe:2.3:a:php:php:3.0.3:::::::* cpe:2.3:a:php:php:3.0.2:::::::* cpe:2.3:a:php:php:3.0.18:::::::* cpe:2.3:a:php:php:3.0.17:::::::* cpe:2.3:a:php:php:3.0.16:::::::* cpe:2.3:a:php:php:3.0.15:::::::* cpe:2.3:a:php:php:3.0.14:::::::* cpe:2.3:a:php:php:3.0.13:::::::* cpe:2.3:a:php:php:3.0.12:::::::* cpe:2.3:a:php:php:3.0.11:::::::* cpe:2.3:a:php:php:3.0.10:::::::* cpe:2.3:a:php:php:3.0.1:::::::* cpe:2.3:a:php:php:3.0:::::::* cpe:2.3:a:php:php:2.0b10:::::::* cpe:2.3:a:php:php:2.0.2:::::::* cpe:2.3:a:php:php:2.0.1:::::::* cpe:2.3:a:php:php:2.0.0:-:::::: cpe:2.3:a:php:php:2.0.0:alpha1:::::: cpe:2.3:a:php:php:2.0.0:alpha2:::::: cpe:2.3:a:php:php:2.0.0:beta1:::::: cpe:2.3:a:php:php:2.0.0:rc1:::::: cpe:2.3:a:php:php:2.0:::::::* cpe:2.3:a:php:php:1.5:::::::* cpe:2.3:a:php:php:1.4:::::::* cpe:2.3:a:php:php:1.3.5:::::::* cpe:2.3:a:php:php:1.3.1:::::::* cpe:2.3:a:php:php:1.3:-:::::: cpe:2.3:a:php:php:1.3:beta2:::::: cpe:2.3:a:php:php:1.3:beta3:::::: cpe:2.3:a:php:php:1.3:beta6:::::: cpe:2.3:a:php:php:1.2.5:::::::* cpe:2.3:a:php:php:1.2.4:::::::* cpe:2.3:a:php:php:1.2.3:::::::* cpe:2.3:a:php:php:1.2.2:::::::* cpe:2.3:a:php:php:1.2.1:::::::* cpe:2.3:a:php:php:1.2.0:::::::* cpe:2.3:a:php:php:1.2:::::::* cpe:2.3:a:php:php:1.1.1:::::::* cpe:2.3:a:php:php:1.1.0:::::::* cpe:2.3:a:php:php:1.1:::::::* cpe:2.3:a:php:php:1.0.4:::::::* cpe:2.3:a:php:php:1.0.3:::::::* cpe:2.3:a:php:php:1.0.2:::::::* cpe:2.3:a:php:php:1.0.1:::::::* cpe:2.3:a:php:php:1.0.0:-:::::: cpe:2.3:a:php:php:1.0.0:rc1:::::: cpe:2.3:a:php:php:1.0:beta1:::::: cpe:2.3:a:php:php:1.0:beta2:::::: cpe:2.3:a:php:php:1.0:beta3:::::: cpe:2.3:a:php:php:1.0:rc1:::::: cpe:2.3:a:php:php:1.0:rc2:::::: cpe:2.3:a:php:php:0.91:::::::* cpe:2.3:a:php:php:0.90:::::::* cpe:2.3:a:php:php:0.9.4:::::::* cpe:2.3:a:php:php:0.9.3:::::::* cpe:2.3:a:php:php:0.9.2:::::::* cpe:2.3:a:php:php:0.9.1:::::::* cpe:2.3:a:php:php:0.9.0:::::::* cpe:2.3:a:php:php:0.9:::::::* cpe:2.3:a:php:php:0.7:::::::* cpe:2.3:a:php:php:0.6:::::::* cpe:2.3:a:php:php:0.5.3:::::::* cpe:2.3:a:php:php:0.5.2:::::::* cpe:2.3:a:php:php:0.5:::::::* cpe:2.3:a:php:php:0.4:::::::* cpe:2.3:a:php:php:0.3:::::::* cpe:2.3:a:php:php:0.2.4:::::::* cpe:2.3:a:php:php:0.2.3:::::::* cpe:2.3:a:php:php:0.2.2:::::::* cpe:2.3:a:php:php:0.2.1:::::::* cpe:2.3:a:php:php:0.2.0:::::::* cpe:2.3:a:php:php:0.2:::::::* cpe:2.3:a:php:php:0.11:::::::* cpe:2.3:a:php:php:0.10:::::::* cpe:2.3:a:php:php:0.1.1:::::::* cpe:2.3:a:php:php:0.1:::::::* cpe:2.3:a:php:php:::::::: cpe:2.3:a:php:php:-:::::::*	610
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:14.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:14.04::::esm::: cpe:2.3:o:canonical:ubuntu_linux:12.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:10.04::::-:::	4
Os	Debian Debian Linux cpe:2.3:o:debian:debian_linux:8.0:::::::* cpe:2.3:o:debian:debian_linux:7.0:::::::*	2

Snort® IPS/IDS

Date	Description
2015-10-06	PHP exif_ifd_make_value thumbnail heap buffer overflow attempt RuleID : 35856 - Revision : 2 - Type : SERVER-WEBAPP
2015-10-06	PHP exif_ifd_make_value thumbnail heap buffer overflow attempt RuleID : 35855 - Revision : 2 - Type : SERVER-WEBAPP
2015-10-06	PHP exif_ifd_make_value thumbnail heap buffer overflow attempt RuleID : 35854 - Revision : 2 - Type : SERVER-WEBAPP
2015-10-06	PHP exif_ifd_make_value thumbnail heap buffer overflow attempt RuleID : 35853 - Revision : 2 - Type : SERVER-WEBAPP
2015-07-02	PHP unserialize function integer overflow attempt RuleID : 34623 - Revision : 3 - Type : SERVER-WEBAPP

Nessus® Vulnerability Scanner

Date	Description
2017-01-18	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201701-42.nasl - Type : ACT_GATHER_INFO
2016-08-29	Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2016-1638-1.nasl - Type : ACT_GATHER_INFO
2016-06-09	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20160510_file_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2016-05-17	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2016-0760.nasl - Type : ACT_GATHER_INFO
2016-05-16	Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2016-0050.nasl - Type : ACT_GATHER_INFO
2016-05-16	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2016-0760.nasl - Type : ACT_GATHER_INFO
2016-05-12	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2016-0760.nasl - Type : ACT_GATHER_INFO
2015-12-22	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20151119_file_on_SL7_x.nasl - Type : ACT_GATHER_INFO
2015-12-02	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2015-2155.nasl - Type : ACT_GATHER_INFO
2015-11-24	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2015-2155.nasl - Type : ACT_GATHER_INFO
2015-11-20	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2015-2155.nasl - Type : ACT_GATHER_INFO
2015-05-27	Name : The remote SUSE host is missing one or more security updates. File : suse_SU-2014-1555-1.nasl - Type : ACT_GATHER_INFO
2015-04-10	Name : The remote host is missing a Mac OS X update that fixes multiple security vul... File : macosx_SecUpd2015-004.nasl - Type : ACT_GATHER_INFO
2015-04-10	Name : The remote host is missing a Mac OS X update that fixes multiple security vul... File : macosx_10_10_3.nasl - Type : ACT_GATHER_INFO
2015-03-30	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2015-080.nasl - Type : ACT_GATHER_INFO
2015-03-26	Name : The remote Debian host is missing a security update. File : debian_DLA-94.nasl - Type : ACT_GATHER_INFO
2015-03-26	Name : The remote Debian host is missing a security update. File : debian_DLA-86.nasl - Type : ACT_GATHER_INFO
2015-03-09	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201503-03.nasl - Type : ACT_GATHER_INFO
2015-02-05	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-2494-1.nasl - Type : ACT_GATHER_INFO
2015-01-09	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2015-0021.nasl - Type : ACT_GATHER_INFO
2015-01-05	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_9575259a92d511e4bce6d050992ecde8.nasl - Type : ACT_GATHER_INFO
2014-11-30	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2014-236.nasl - Type : ACT_GATHER_INFO
2014-11-28	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-723.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2014-453.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2014-451.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2014-450.nasl - Type : ACT_GATHER_INFO
2014-11-20	Name : The remote Debian host is missing a security-related update. File : debian_DSA-3074.nasl - Type : ACT_GATHER_INFO
2014-11-13	Name : The remote Debian host is missing a security-related update. File : debian_DSA-3072.nasl - Type : ACT_GATHER_INFO
2014-11-12	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-645.nasl - Type : ACT_GATHER_INFO
2014-11-11	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-636.nasl - Type : ACT_GATHER_INFO
2014-11-07	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2014-1824.nasl - Type : ACT_GATHER_INFO
2014-11-07	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2014-1824.nasl - Type : ACT_GATHER_INFO
2014-11-05	Name : The remote Debian host is missing a security-related update. File : debian_DSA-3064.nasl - Type : ACT_GATHER_INFO
2014-11-03	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2014-1768.nasl - Type : ACT_GATHER_INFO
2014-11-03	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2014-1767.nasl - Type : ACT_GATHER_INFO
2014-11-03	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2014-435.nasl - Type : ACT_GATHER_INFO
2014-11-03	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2014-434.nasl - Type : ACT_GATHER_INFO
2014-10-31	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-2391-1.nasl - Type : ACT_GATHER_INFO
2014-10-31	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2014-1768.nasl - Type : ACT_GATHER_INFO
2014-10-31	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2014-1767.nasl - Type : ACT_GATHER_INFO
2014-10-31	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2014-1767.nasl - Type : ACT_GATHER_INFO
2014-10-29	Name : The remote Fedora host is missing a security update. File : fedora_2014-13031.nasl - Type : ACT_GATHER_INFO
2014-10-24	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2014-202.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-11-05 17:27:51	Multiple Updates
2014-11-04 13:27:36	Multiple Updates
2014-11-01 13:26:42	Multiple Updates
2014-10-31 00:20:42	First insertion

Global Informations

Type	Count
CWE ID(s)	4
Oval ID(s)	12
CPE ID(s)	616
Snort® Rule(s)	5
Nessus® Exploit(s)	43

	Related
7.5	CVE-2014-3669
6.8	CVE-2014-3670
5	CVE-2014-3710
5	CVE-2014-3668
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 4 more Alert(s)