oval:org.mitre.oval:def:7394

Definition Id: oval:org.mitre.oval:def:7394

Oval ID:	oval:org.mitre.oval:def:7394
Title:	HP-UX Running Apache with PHP, Remote Denial of Service (DoS), Unauthorized Access, Privileged Access, Cross Site Scripting (XSS)
Description:	The php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform certificate validation, which has unknown impact and attack vectors, probably related to an ability to spoof certificates.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3291	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02543 platforms HP-UX B.11.31 AND HP Release B.11.23 AND filesets tests hpuxws22APCH32.PHP version is less than B.2.2.8.10 AND hpuxws22APCH32.PHP2 version is less than B.2.2.8.10 AND hpuxws22APACHE.PHP version is less than B.2.2.8.10 AND hpuxws22APACHE.PHP2 version is less than B.2.2.8.10 OR Criteria meets HP Security Bulletin HPSBUX02543 platforms HP-UX B.11.31 AND HP Release B.11.11 AND HP Release B.11.23 AND filesets tests hpuxwsAPCH32.PHP version is less than B.2.0.59.16 AND hpuxwsAPCH32.PHP2 version is less than B.2.0.59.16 AND hpuxwsAPACHE.PHP version is less than B.2.0.59.16 AND hpuxwsAPACHE.PHP2 version is less than B.2.0.59.16