diff options
| author | simon <simon@FreeBSD.org> | 2005-04-10 18:47:06 +0000 |
|---|---|---|
| committer | simon <simon@FreeBSD.org> | 2005-04-10 18:47:06 +0000 |
| commit | aca1f610bef8e9ba2c71cc75c0a07acfe41469bc (patch) | |
| tree | f96d43d048f5668d8cf588bb2eb8f09c40d6aaac /security | |
| parent | b8dc825387dbf3675d5fa5c0169743799dac013a (diff) | |
| download | FreeBSD-ports-aca1f610bef8e9ba2c71cc75c0a07acfe41469bc.zip FreeBSD-ports-aca1f610bef8e9ba2c71cc75c0a07acfe41469bc.tar.gz | |
Document an old PHP issue.
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 42 |
1 files changed, 42 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 8aa7838..2f41e14 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -32,6 +32,48 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="07f3fe15-a9de-11d9-a788-0001020eed82"> + <topic>php -- readfile() DoS vulnerability</topic> + <affects> + <package> + <name>mod_php4-twig</name> + <name>php4-cgi</name> + <name>php4-cli</name> + <name>php4-dtc</name> + <name>php4-horde</name> + <name>php4-nms</name> + <name>php4</name> + <range><lt>4.3.5_7</lt></range> + </package> + <package> + <name>mod_php</name> + <name>mod_php4</name> + <range><lt>4.3.5_7,1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>A SUSE Security advisory reports:</p> + <blockquote cite="http://www.novell.com/linux/security/advisories/2005_06_sr.html"> + <p>A bug in the readfile() function of php4 could be used to + to crash the httpd running the php4 code when accessing + files with a multiple of the architectures page size + leading to a denial of service.</p> + </blockquote> + </body> + </description> + <references> + <bid>12665</bid> + <cvename>CAN-2005-0596</cvename> + <url>http://bugs.php.net/bug.php?id=27037</url> + <url>http://www.novell.com/linux/security/advisories/2005_06_sr.html</url> + </references> + <dates> + <discovery>2004-01-25</discovery> + <entry>2005-04-10</entry> + </dates> + </vuln> + <vuln vid="8dbf7894-a9a8-11d9-a788-0001020eed82"> <topic>squid -- DoS on failed PUT/POST requests vulnerability</topic> <affects> |
