oval:org.mitre.oval:def:21394

Definition Id: oval:org.mitre.oval:def:21394

Oval ID:	oval:org.mitre.oval:def:21394
Title:	RHSA-2012:0546: php security update (Critical)
Description:	sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0546-01 CESA-2012:0546 CVE-2012-1823	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 CentOS Linux 5 CentOS Linux 6	Product(s):	php
Definition Synopsis:
Operation system section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section php-common is earlier than 0:5.1.6-34.el5_8 AND php-pdo is earlier than 0:5.1.6-34.el5_8 AND php-ncurses is earlier than 0:5.1.6-34.el5_8 AND php-pgsql is earlier than 0:5.1.6-34.el5_8 AND php-snmp is earlier than 0:5.1.6-34.el5_8 AND php-xmlrpc is earlier than 0:5.1.6-34.el5_8 AND php-devel is earlier than 0:5.1.6-34.el5_8 AND php is earlier than 0:5.1.6-34.el5_8 AND php-odbc is earlier than 0:5.1.6-34.el5_8 AND php-imap is earlier than 0:5.1.6-34.el5_8 AND php-gd is earlier than 0:5.1.6-34.el5_8 AND php-soap is earlier than 0:5.1.6-34.el5_8 AND php-mysql is earlier than 0:5.1.6-34.el5_8 AND php-bcmath is earlier than 0:5.1.6-34.el5_8 AND php-mbstring is earlier than 0:5.1.6-34.el5_8 AND php-ldap is earlier than 0:5.1.6-34.el5_8 AND php-dba is earlier than 0:5.1.6-34.el5_8 AND php-cli is earlier than 0:5.1.6-34.el5_8 AND php-xml is earlier than 0:5.1.6-34.el5_8 AND Operation system section Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages section php-pdo is earlier than 0:5.3.3-3.el6_2.8 AND php-common is earlier than 0:5.3.3-3.el6_2.8 AND php-xmlrpc is earlier than 0:5.3.3-3.el6_2.8 AND php-embedded is earlier than 0:5.3.3-3.el6_2.8 AND php-pgsql is earlier than 0:5.3.3-3.el6_2.8 AND php-snmp is earlier than 0:5.3.3-3.el6_2.8 AND php-enchant is earlier than 0:5.3.3-3.el6_2.8 AND php-recode is earlier than 0:5.3.3-3.el6_2.8 AND php-devel is earlier than 0:5.3.3-3.el6_2.8 AND php is earlier than 0:5.3.3-3.el6_2.8 AND php-odbc is earlier than 0:5.3.3-3.el6_2.8 AND php-gd is earlier than 0:5.3.3-3.el6_2.8 AND php-imap is earlier than 0:5.3.3-3.el6_2.8 AND php-soap is earlier than 0:5.3.3-3.el6_2.8 AND php-tidy is earlier than 0:5.3.3-3.el6_2.8 AND php-mysql is earlier than 0:5.3.3-3.el6_2.8 AND php-process is earlier than 0:5.3.3-3.el6_2.8 AND php-intl is earlier than 0:5.3.3-3.el6_2.8 AND php-zts is earlier than 0:5.3.3-3.el6_2.8 AND php-bcmath is earlier than 0:5.3.3-3.el6_2.8 AND php-mbstring is earlier than 0:5.3.3-3.el6_2.8 AND php-ldap is earlier than 0:5.3.3-3.el6_2.8 AND php-dba is earlier than 0:5.3.3-3.el6_2.8 AND php-cli is earlier than 0:5.3.3-3.el6_2.8 AND php-pspell is earlier than 0:5.3.3-3.el6_2.8 AND php-xml is earlier than 0:5.3.3-3.el6_2.8

Definition Id: oval:org.mitre.oval:def:15802

Oval ID:	oval:org.mitre.oval:def:15802
Title:	The operating system installed on the system is CentOS Linux 5.x
Description:	The operating system installed on the system is CentOS Linux 5.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:centos:centos:5	Version:	7
Platform(s):	CentOS Linux 5	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND CentOS Linux 5.x is installed
Referenced By:
oval:org.mitre.oval:def:21394

Definition Id: oval:org.mitre.oval:def:11414

Oval ID:	oval:org.mitre.oval:def:11414
Title:	The operating system installed on the system is Red Hat Enterprise Linux 5
Description:	The operating system installed on the system is Red Hat Enterprise Linux 5.
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:redhat:enterprise_linux:5	Version:	7
Platform(s):	Red Hat Enterprise Linux 5	Product(s):
Definition Synopsis:
Red Hat Enterprise 5 is installed
Referenced By:
oval:org.mitre.oval:def:21394

Definition Id: oval:org.mitre.oval:def:20273

Oval ID:	oval:org.mitre.oval:def:20273
Title:	The operating system installed on the system is Red Hat Enterprise Linux 6
Description:	The operating system installed on the system is Red Hat Enterprise Linux 6.
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:redhat:enterprise_linux:6	Version:	6
Platform(s):	Red Hat Enterprise Linux 6	Product(s):
Definition Synopsis:
Red Hat Enterprise 6 is installed AND NOT Oracle Linux 6.x is installed
Referenced By:
oval:org.mitre.oval:def:21394

Definition Id: oval:org.mitre.oval:def:16337

Oval ID:	oval:org.mitre.oval:def:16337
Title:	The operating system installed on the system is CentOS Linux 6.x
Description:	The operating system installed on the system is CentOS Linux 6.x
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:centos:centos:6	Version:	5
Platform(s):	CentOS Linux 6	Product(s):
Definition Synopsis:
the installed operating system is part of the Unix family AND CentOS Linux 6.x is installed
Referenced By:
oval:org.mitre.oval:def:21394

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0489s

Facebook rss twitter linkedin mail