Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Gentoo: GLSA 200507-01 High: PEAR XML-RPC PHP Script Injection

gentoo
Calendar Grey July 3, 2005
Scroller Gentoo
Unauthorized entities may run undefined PHP instructions through PEAR XML-RPC packages on Gentoo systems. Alert Reference: GLSA 200507-01.
The PEAR XML-RPC and phpxmlrpc libraries allow remote attackers to execute arbitrary PHP script commands.

Summary

Gentoo Linux Security Advisory GLSA 200507-01 https://security.gentoo.org/ Severity: High Title: PEAR XML-RPC, phpxmlrpc: PHP script injection vulnerability Date: July 03, 2005 Bugs: #97399, #97629 ID: 200507-01

Synopsis ======= The PEAR XML-RPC and phpxmlrpc libraries allow remote attackers to execute arbitrary PHP script commands.
Background ========= The PEAR XML-RPC and phpxmlrpc libraries are both PHP implementations of the XML-RPC protocol.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-php/PEAR-XML_RPC < 1.3.1 >= 1.3.1 2 dev-php/phpxmlrpc < 1.1.1 >= 1.1.1 -----------------------------------------...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory Gentoo high severity arbitrary code execution PHP script injection PEAR XML-RPC phpxmlrpc

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory Gentoo high severity arbitrary code execution PHP script injection PEAR XML-RPC phpxmlrpc

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround