PHP Error Message Cross-Site Scripting Kod Açığı

Onur OKTAY
24-08-2006, 22:40   |  #1  
OP Yıllanmış Üye
Teşekkür Sayısı: 0
169 mesaj
Kayıt Tarihi:Kayıt: Şub 2006

Risk : Yüksek
Etki: Uzaktan kod caliştirma
Etkilenenler:Ubuntu Ubuntu Linux 5.10 powerpc
Ubuntu Ubuntu Linux 5.10 i386
Ubuntu Ubuntu Linux 5.10 amd64
Ubuntu Ubuntu Linux 5.0 4 powerpc
Ubuntu Ubuntu Linux 5.0 4 i386
Ubuntu Ubuntu Linux 5.0 4 amd64
Ubuntu Ubuntu Linux 4.1 ppc
Ubuntu Ubuntu Linux 4.1 ia64
Ubuntu Ubuntu Linux 4.1 ia32
Turbolinux Turbolinux Server 10.0 x86
Turbolinux Turbolinux Server 10.0
Turbolinux Turbolinux Desktop 10.0
Turbolinux Turbolinux 10 F...
TurboLinux Personal
TurboLinux Multimedia
Turbolinux Home
Turbolinux Appliance Server Workgroup Edition 1.0
Turbolinux Appliance Server Hosting Edition 1.0
Turbolinux Appliance Server 1.0 Workgroup Edition
Turbolinux Appliance Server 1.0 Hosting Edition
Turbolinux Appliance Server 2.0
SGI ProPack 3.0 SP6
RedHat Stronghold 4.0
RedHat Linux 9.0 i386
RedHat Linux 7.3 i386
RedHat Fedora Core3
RedHat Fedora Core2
RedHat Fedora Core1
RedHat Enterprise Linux WS 4
RedHat Enterprise Linux WS 3
RedHat Enterprise Linux WS 2.1 IA64
RedHat Enterprise Linux WS 2.1
RedHat Enterprise Linux ES 4
RedHat Enterprise Linux ES 3
RedHat Enterprise Linux ES 2.1 IA64
RedHat Enterprise Linux ES 2.1
RedHat Enterprise Linux AS 4
RedHat Enterprise Linux AS 3
RedHat Enterprise Linux AS 2.1 IA64
RedHat Enterprise Linux AS 2.1
RedHat Desktop 4.0
RedHat Desktop 3.0
RedHat Advanced Workstation for the Itanium Processor 2.1 IA64
RedHat Advanced Workstation for the Itanium Processor 2.1
PHP PHP 5.1.1
PHP PHP 5.1
PHP PHP 5.0.5
PHP PHP 5.0.4
PHP PHP 5.0.3
PHP PHP 5.0.2
PHP PHP 5.0.1
PHP PHP 5.0 candidate 3
PHP PHP 5.0 candidate 2
PHP PHP 5.0 candidate 1
PHP PHP 5.0 .0
PHP PHP 4.4.1
PHP PHP 4.4 .0
PHP PHP 4.3.11
PHP PHP 4.3.10
+ Gentoo Linux
+ RedHat Fedora Core3
+ Trustix Secure Enterprise Linux 2.0
+ Trustix Secure Linux 2.2
+ Trustix Secure Linux 2.1
+ Trustix Secure Linux 2.0
+ Trustix Secure Linux 1.5
PHP PHP 4.3.9
PHP PHP 4.3.8
+ MandrakeSoft Linux Mandrake 10.1 x86_64
+ MandrakeSoft Linux Mandrake 10.1
+ S.u.S.E. Linux Personal 9.2
+ Turbolinux Turbolinux Server 10.0
+ Ubuntu Ubuntu Linux 4.1 ppc
+ Ubuntu Ubuntu Linux 4.1 ia64
+ Ubuntu Ubuntu Linux 4.1 ia32
PHP PHP 4.3.7
PHP PHP 4.3.6
PHP PHP 4.3.5
PHP PHP 4.3.4
+ MandrakeSoft Corporate Server 3.0 x86_64
+ MandrakeSoft Corporate Server 3.0
+ MandrakeSoft Linux Mandrake 10.0 AMD64
+ MandrakeSoft Linux Mandrake 10.0
+ S.u.S.E. Linux Personal 9.1
PHP PHP 4.3.3
+ S.u.S.E. Linux Personal 9.0 x86_64
+ S.u.S.E. Linux Personal 9.0
+ Turbolinux Home
+ Turbolinux Turbolinux 10 F...
+ Turbolinux Turbolinux Desktop 10.0
PHP PHP 4.3.2
PHP PHP 4.3.1
PHP PHP 4.3
PHP PHP 4.2.3
+ EnGarde Secure Linux 1.0.1
+ MandrakeSoft Corporate Server 2.1 x86_64
+ MandrakeSoft Corporate Server 2.1
+ MandrakeSoft Linux Mandrake 9.0
+ Turbolinux Turbolinux Server 8.0
+ Turbolinux Turbolinux Server 7.0
+ Turbolinux Turbolinux Workstation 8.0
+ Turbolinux Turbolinux Workstation 7.0
PHP PHP 4.2.2
PHP PHP 4.2.1
- FreeBSD FreeBSD 4.6
- FreeBSD FreeBSD 4.5
- FreeBSD FreeBSD 4.4
- FreeBSD FreeBSD 4.3
+ Slackware Linux 8.1
PHP PHP 4.2 .0
PHP PHP 4.2 -dev
PHP PHP 4.1.2
+ Apple Mac OS X 10.1.5
+ Apple Mac OS X 10.1.4
+ Apple Mac OS X 10.1.3
+ Apple Mac OS X 10.1.2
+ Apple Mac OS X 10.1.1
+ Apple Mac OS X 10.1
+ Apple Mac OS X 10.1
+ Apple Mac OS X 10.0.4
+ Apple Mac OS X 10.0.3
+ Apple Mac OS X 10.0.2
+ Apple Mac OS X 10.0.1
+ Apple Mac OS X 10.0
+ Debian Linux 3.0 sparc
+ Debian Linux 3.0 s/390
+ Debian Linux 3.0 ppc
+ Debian Linux 3.0 mipsel
+ Debian Linux 3.0 mips
+ Debian Linux 3.0 m68k
+ Debian Linux 3.0 ia-64
+ Debian Linux 3.0 ia-32
+ Debian Linux 3.0 hppa
+ Debian Linux 3.0 arm
+ Debian Linux 3.0 alpha
+ MandrakeSoft Linux Mandrake 8.2 ppc
+ MandrakeSoft Linux Mandrake 8.2
+ MandrakeSoft Multi Network Firewall 2.0
+ MandrakeSoft Single Network Firewall 7.2
PHP PHP 4.1.1
+ Conectiva Linux 7.0
PHP PHP 4.1 .0
+ S.u.S.E. Linux 8.0 i386
+ S.u.S.E. Linux 8.0
PHP PHP 4.0.7 RC3
PHP PHP 4.0.7 RC2
PHP PHP 4.0.7 RC1
PHP PHP 4.0.7
PHP PHP 4.0.6
PHP PHP 4.0.5
PHP PHP 4.0.4
PHP PHP 4.0.3 pl1
+ S.u.S.E. Linux 6.4 ppc
+ S.u.S.E. Linux 6.4 i386
+ S.u.S.E. Linux 6.4 alpha
+ S.u.S.E. Linux 6.4
PHP PHP 4.0.3
+ Debian Linux 2.2 sparc
+ Debian Linux 2.2 powerpc
+ Debian Linux 2.2 IA-32
+ Debian Linux 2.2 arm
+ Debian Linux 2.2 alpha
+ Debian Linux 2.2 68k
+ Debian Linux 2.2
+ Sun Cobalt Control Station 4100CS
+ Sun Cobalt Qube3 Japanese 4000WGJ
+ Sun Cobalt Qube3 Japanese w/ Caching and RAID 4100WGJ
+ Sun Cobalt Qube3 Japanese w/Caching 4010WGJ
+ Sun Cobalt RaQ XTR 3500R
+ Sun Cobalt RaQ XTR Japanese 3500R-ja
PHP PHP 4.0.2
PHP PHP 4.0.1 pl2
PHP PHP 4.0.1 pl1
PHP PHP 4.0.1
+ Sun Cobalt Qube3 4000WG
+ Sun Cobalt Qube3 w/ Caching and RAID 4100WG
+ Sun Cobalt Qube3 w/Caching 4010WG
+ Sun Cobalt RaQ4 3001R
+ Sun Cobalt RaQ4 Japanese RAID 3100R-ja
+ Sun Cobalt RaQ4 RAID 3100R
PHP PHP 4.0 0
PHP PHP 3.0.18
PHP PHP 3.0.17
+ S.u.S.E. Linux 7.1 x86
+ S.u.S.E. Linux 7.1 sparc
+ S.u.S.E. Linux 7.1 ppc
+ S.u.S.E. Linux 7.1 alpha
+ S.u.S.E. Linux 7.1
+ S.u.S.E. Linux 7.0 sparc
+ S.u.S.E. Linux 7.0 ppc
+ S.u.S.E. Linux 7.0 i386
+ S.u.S.E. Linux 7.0 alpha
+ S.u.S.E. Linux 7.0
+ Trustix Secure Linux 1.2
+ Trustix Secure Linux 1.1
PHP PHP 3.0.16
PHP PHP 3.0.15
PHP PHP 3.0.14
PHP PHP 3.0.13
PHP PHP 3.0.12
PHP PHP 3.0.11
PHP PHP 3.0.10
PHP PHP 3.0.9
PHP PHP 3.0.8
PHP PHP 3.0.7
PHP PHP 3.0.6
PHP PHP 3.0.5
PHP PHP 3.0.4
PHP PHP 3.0.3
PHP PHP 3.0.2
PHP PHP 3.0.1
PHP PHP 3.0 0
PHP PHP 3.0 .16
PHP PHP 3.0 .13
PHP PHP 3.0 .12
PHP PHP 3.0 .11
PHP PHP 3.0 .10
Gentoo Linux
Avaya S8710 R2.0.1
Avaya S8710 R2.0.0
Avaya S8700 R2.0.1
Avaya S8700 R2.0.0
Avaya S8500 R2.0.1
Avaya S8500 R2.0.0
Avaya S8300 R2.0.1
Avaya S8300 R2.0.0
Avaya Messaging Storage Server
Avaya Message Networking
Avaya Intuity LX
Avaya Interactive Response
Avaya Integrated Management
Avaya CVLAN
Avaya Converged Communications Server 2.0

Bilgi : 'display_errors' and 'html_errors' parametrelerinde meydana gelen güvenlik zaafiyetlerinden yararlanılarak hacker'lar uzakdan kod caliştirma açığını sömürüyorlar.

Çözüm/Yama :
PHP PHP 3.0 0

PHP php-5.1.2.tar.bz2


PHP PHP 3.0 .10

PHP php-5.1.2.tar.bz2


PHP PHP 3.0 .12

PHP php-5.1.2.tar.bz2


PHP PHP 3.0 .13

PHP php-5.1.2.tar.bz2


PHP PHP 3.0 .11

PHP php-5.1.2.tar.bz2


PHP PHP 3.0.10

PHP php-5.1.2.tar.bz2


PHP PHP 3.0.11

PHP php-5.1.2.tar.bz2


PHP PHP 3.0.13

PHP php-5.1.2.tar.bz2


PHP PHP 3.0.15

PHP php-5.1.2.tar.bz2


PHP PHP 3.0.17

PHP php-5.1.2.tar.bz2


PHP PHP 3.0.2

PHP php-5.1.2.tar.bz2


PHP PHP 3.0.3

PHP php-5.1.2.tar.bz2


PHP PHP 3.0.4

PHP php-5.1.2.tar.bz2


PHP PHP 3.0.5

PHP php-5.1.2.tar.bz2


PHP PHP 3.0.8

PHP php-5.1.2.tar.bz2


PHP PHP 3.0.9

PHP php-5.1.2.tar.bz2


PHP PHP 4.0 0

PHP php-5.1.2.tar.bz2


PHP PHP 4.0.1

PHP php-5.1.2.tar.bz2


PHP PHP 4.0.1 pl2

PHP php-5.1.2.tar.bz2


PHP PHP 4.0.2

PHP php-5.1.2.tar.bz2


PHP PHP 4.0.3 pl1

PHP php-5.1.2.tar.bz2


PHP PHP 4.0.3

PHP php-5.1.2.tar.bz2


PHP PHP 4.0.5

PHP php-5.1.2.tar.bz2


PHP PHP 4.0.7 RC1

PHP php-5.1.2.tar.bz2


PHP PHP 4.0.7 RC2

PHP php-5.1.2.tar.bz2


PHP PHP 4.0.7

PHP php-5.1.2.tar.bz2


PHP PHP 4.1 .0

PHP php-5.1.2.tar.bz2


PHP PHP 4.1.1

PHP php-5.1.2.tar.bz2


PHP PHP 4.1.2

PHP php-5.1.2.tar.bz2


PHP PHP 4.2 -dev

PHP php-5.1.2.tar.bz2


PHP PHP 4.2.1

PHP php-5.1.2.tar.bz2


PHP PHP 4.2.3

PHP php-5.1.2.tar.bz2


PHP PHP 4.3

PHP php-5.1.2.tar.bz2


PHP PHP 4.3.10

PHP php-5.1.2.tar.bz2


PHP PHP 4.3.11

PHP php-5.1.2.tar.bz2


PHP PHP 4.3.2

PHP php-5.1.2.tar.bz2


PHP PHP 4.3.3

PHP php-5.1.2.tar.bz2


PHP PHP 4.3.4

PHP php-5.1.2.tar.bz2


PHP PHP 4.3.5

PHP php-5.1.2.tar.bz2


PHP PHP 4.3.6

PHP php-5.1.2.tar.bz2


PHP PHP 4.3.8

PHP php-5.1.2.tar.bz2


PHP PHP 4.3.9

PHP php-5.1.2.tar.bz2


PHP PHP 4.4.1

PHP php-5.1.2.tar.bz2


PHP PHP 5.0 .0

PHP php-5.1.2.tar.bz2


PHP PHP 5.0 candidate 1

PHP php-5.1.2.tar.bz2


PHP PHP 5.0.1

PHP php-5.1.2.tar.bz2


PHP PHP 5.0.2

PHP php-5.1.2.tar.bz2


PHP PHP 5.0.4

PHP php-5.1.2.tar.bz2


PHP PHP 5.1

PHP php-5.1.2.tar.bz2


PHP PHP 5.1.1

PHP php-5.1.2.tar.bz2

Kaynak : Php.Net

Security advisory by Onur OKTAY