PT-2006-5286 · Php+1 · Php+1

Publicado 2006-08-31 · Atualizado 2018-10-30 · CVE-2006-4486

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.1.6

Description The issue concerns an integer overflow in memory allocation routines in PHP when running on 64-bit systems. This allows context-dependent attackers to bypass the memory limit restriction.

Recommendations For versions prior to 5.1.6, update to version 5.1.6 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2006-4486

DSA-1331-1

RHSA-2006:0669

RHSA-2006:0688

RHSA-2006_0669

Produtos afetados

Php

Red Hat

Referências · 42

• http://secunia.com/advisories/22538 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2006-3016 · Nota
• https://access.redhat.com/security/cve/CVE-2006-4482 · Nota
• http://securityfocus.com/archive/1/447866/100/0/threaded · Nota
• http://bugs.php.net/bug.php?id=38322 · Nota
• http://bugs.php.net/bug.php?id=38112 · Nota
• https://access.redhat.com/security/cve/CVE-2006-4486 · Nota
• http://turbolinux.com/security/2006/TLSA-2006-38.txt · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4486 · Nota
• http://ubuntu.com/usn/usn-362-1 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2006-0669.html · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2006_52_php.html · Aviso do Fabricante
• http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm · Nota
• http://securityfocus.com/archive/1/archive/1/447866/100/0/threaded · Nota
• http://secunia.com/advisories/22487 · Aviso do Fabricante