PT-2009-6313 · Php+1 · Php+1

Stefan Esser · Publicado 2009-12-21 · Atualizado 2018-10-30 · CVE-2009-4143

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.2.12

Description The issue is related to the handling of session data. It involves interrupt corruption of the SESSION superglobal array and issues with the session.save path directive. The impact and attack vectors of this issue are not explicitly specified.

Recommendations For PHP versions prior to 5.2.12, update to version 5.2.12 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2009-4143

DSA-2001-1

HPSBUX02543

Produtos afetados

Hp-Ux

Php

Referências · 33

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3291 · Nota de Segurança
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMjI0NzczOA%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3292 · Nota de Segurança
• http://securityreason.com/securityalert/6601 · Nota
• http://secunia.com/advisories/38648 · Aviso do Fabricante
• http://secunia.com/advisories/41490 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4143 · Nota
• http://secunia.com/advisories/37821 · Aviso do Fabricante
• http://bugs.php.net/bug.php?id=49026 · Nota
• http://debian.org/security/2010/dsa-2001 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-4143 · Nota de Segurança
• http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02512995 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/3593 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4143 · Nota de Segurança
• http://mandriva.com/security/advisories?name=MDVSA-2010:045 · Aviso do Fabricante