Alert GCSA-07089 - Vulnerabilita' in PHP 5.2.x

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************

    Alert ID : GCSA-07089
        Data : 06 settembre 2007
      Titolo : Vulnerabilita' in PHP 5.2.x

******************************************************************


:: Descrizione del problema

    Sono state identificate varie vulnerabilita' in PHP,
    alcune di queste hanno impatti sconosciuti
    mentre altre possono essere sfruttate per scavalcare
    certe restrizioni di sicurezza.


:: Software interessato

    PHP versioni precedenti alla 5.2.4


:: Impatto:

    Bypass di restrizioni di sicurezza
    Potenziale esecuzione remota di codice arbitrario


:: Soluzioni

    Aggiornare PHP alla versione 5.2.4
    http://www.php.net/downloads.php#v5


:: Riferimenti

    PHP.NET
    http://www.php.net/releases/5_2_4.php

    Mitre's CVE ID
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3996
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3378
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3997
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4652
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4658
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4659
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4670
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4657
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4662
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3998

    Secunia advisories
    http://secunia.com/advisories/26642/

-----BEGIN PGP SIGNATURE-----

iQCVAwUBRuAXxfOB+SpikaiRAQL4DQP/eu05e97k4bkL2uNSFS4qV+ce/qp0U4ei
no7SlKzHjmVpopGpZSLpZom1MZYv5HmBtIBXPWqXaFWZjoUkxAtvILfPCpOzpZpC
9hAy3y53jxvWaaAq06LuwDQGAT3nuGNXCPWOmUcn0dGreXuXHVJW+QSzMi34sIas
O07go+gO/NQ=
=bRxD
-----END PGP SIGNATURE-----