PT-2006-6182 · Php+1 · Php+1

Stefan Esser · Publicado 2006-11-03 · Atualizado 2018-10-30 · CVE-2006-5465

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.2.0

Description The issue allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.

Recommendations For PHP versions prior to 5.2.0, update to version 5.2.0 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-5465

DSA-1206-1

RHSA-2006:0730

RHSA-2006:0731

RHSA-2006_0730

Produtos afetados

Php

Red Hat

Referências · 54

• http://vupen.com/english/advisories/2007/1546 · Nota
• http://docs.info.apple.com/article.html?artnum=304829 · Nota
• http://secunia.com/advisories/22881 · Nota
• http://cisco.com/en/US/products/products_security_response09186a008082c4fe.html · Aviso do Fabricante
• http://securityfocus.com/archive/1/451098/100/0/threaded · Nota
• http://secunia.com/advisories/22653 · Nota
• http://turbolinux.com/security/2006/TLSA-2006-38.txt · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/4317 · Nota
• https://access.redhat.com/errata/RHSA-2006:0730 · Nota
• http://secunia.com/advisories/24606 · Nota
• http://securitytracker.com/id?1017296 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5465 · Nota
• http://redhat.com/support/errata/RHSA-2006-0730.html · Aviso do Fabricante
• http://php.net/releases/5_2_0.php · Nota
• http://openpkg.com/security/advisories/OpenPKG-SA-2006.028.html · Aviso do Fabricante