-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
AA-2008.0101                  AUSCERT Advisory

                             [Win][UNIX/Linux]
          PHP 5.2.6 released correcting multiple vulnerabilities
                                9 May 2008
- ---------------------------------------------------------------------------

        AusCERT Advisory Summary
        ------------------------

Product:              PHP 5.2.5 and prior
Operating System:     UNIX variants (UNIX, Linux, OSX)
                      Windows
Impact:               Execute Arbitrary Code/Commands
                      Denial of Service
                      Inappropriate Access
Access:               Remote/Unauthenticated
CVE Names:            CVE-2008-2108 CVE-2008-2107 CVE-2008-2051
                      CVE-2008-2050 CVE-2008-0599
Member content until: Tuesday, June 03 2008

Revision History:  May 9 2008: Added addtional CVE numbers
                   May 7 2008: Added CVE numbers
                   May 6 2008: Initial Release


OVERVIEW

        PHP 5.2.6 has been released to correct multiple security
        vulnerabilities and other bug fixes.
        

DETAILS

        Listed on the PHP website as security enhancements and fixes are:

          * Fixed possible stack buffer overflow in the FastCGI SAPI 
            identified by Andrei Nigmatulin.
          * Fixed integer overflow in printf() identified by Maksymilian 
            Aciemowicz.
          * Fixed security issue detailed in CVE-2008-0599 identified by 
            Ryan Permeh.
          * Fixed a safe_mode bypass in cURL identified by Maksymilian 
            Arciemowicz.
          * Properly address incomplete multibyte chars inside 
            escapeshellcmd() identified by Stefan Esser.
          * Upgraded bundled PCRE to version 7.6


MITIGATION

        Upgrade your PHP installations to the latest version.


REFERENCES

        [1] PHP 5.2.6 Release Announcement
            http://www.php.net/releases/5_2_6.php

        [2] Changelog
            http://www.php.net/ChangeLog-5.php#5.2.6


AusCERT has made every effort to ensure that the information contained
in this document is accurate.  However, the decision to use the information
described is the responsibility of each user or organisation. The decision to
follow or act on information or advice contained in this security bulletin is
the responsibility of each user or organisation, and should be considered in
accordance with your organisation's site policies and procedures. AusCERT
takes no responsibility for consequences which may arise from following or
acting on information or advice contained in this security bulletin.

If you believe that your computer system has been compromised or attacked in 
any way, we encourage you to let us know by completing the secure National IT 
Incident Reporting Form at:

        http://www.auscert.org.au/render.html?it=3192

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================

-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iQCVAwUBSCOZwCh9+71yA2DNAQLANgP/Un8vkp7a66YqGr75/Iv9wmgulKSyDRks
FhozjB+MA6q3frfZGVsx6Svbjcm546JKEKjJC9e96t4oPHxjKmyzc4HIQxzHmbRT
4brr40DHawFc8ifrUvAiHoNEybmuz3OxwQRMSpG/NqbnXjAkiiq8xvITThgbkKGd
AxoF4qPc8vk=
=Y5yH
-----END PGP SIGNATURE-----