Alerts This Week
Warning Icon 1 1,050
Alerts This Week
Warning Icon 1 1,050

Gentoo: Urgent PHP Module Memory Leak Threat Detected in 202306-7

gentoo
Calendar Grey January 13, 2003
Dist Gentoo Esm H88
GENTOO LINUX SECURITY ADVISORY 202301-1: significant vulnerability identified in mod_python, urgent action required for all Gentoo users.
If you use the wordwrap() function on user-supplied input, a specially-crafted input can overflow the allocated buffer and overwrite the heap.

Summary


- --------------------------------------------------------------------
GENTOO LINUX SECURITY ANNOUNCEMENT 200301-8
- --------------------------------------------------------------------
DATE    : 2003-01-13 15:01 UTC

- --------------------------------------------------------------------

From advisory:

"If you use the wordwrap() function on user-supplied input, a
specially-crafted input can overflow the allocated buffer and
overwrite the heap.  Exploit looks very difficult, but still
theoretically possible."

Read the full advisory at 
http://marc.theaimsgroup.com/?l=bugtraq&m=104102689503192&w=2

SOLUTION

It is recommended that all Gentoo Linux users who are running
dev-php/php-4.2.3 and/or dev-php/mod_php-4.2.3  or earlier update
their systems as follows:

emerge rsync
emerge php

and/or

emerge mod_php

finish with:

emerge clean

- ------------...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory gentoo buffer overflow remote exploit heap overflow php module

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
critical
Lowest
Low
Medium
High
Critical

PACKAGE : mod_php php
SUMMARY : buffer overflow
EXPLOIT : remote

Topics%20covered

Topics Covered

security advisory gentoo buffer overflow remote exploit heap overflow php module

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround

Your message here